0x2) r11 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a12, 0x1, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0xd55, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000002c0)='@.[(-[\x00') recvmsg(r11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x6, 0x6, 0x5, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10100, 0x1000, 0x5, 0x5, 0x3, 0x4, 0x8, 0x0, 0x4, 0x0, 0x1}, r10, 0xb, r11, 0x2) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@exit, @jmp={0x5, 0x0, 0x6, 0x6, 0x3, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000e40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x6a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r6, 0xffffffffffffffff, r0, r8, r8, 0x1, r3], 0x0, 0x10, 0x200}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x7f, 0xff, 0x5, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x80, 0x3}, 0x104000, 0x8000, 0x5, 0x2, 0x5d7b6b16, 0x8, 0x9, 0x0, 0x20, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r12, 0x0, 0x4000000000000000}, 0x38) 13:14:28 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xf1}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3471.936163][T20411] FAULT_INJECTION: forcing a failure. [ 3471.936163][T20411] name failslab, interval 1, probability 0, space 0, times 0 [ 3471.950327][T20411] CPU: 0 PID: 20411 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3471.960522][T20411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3471.970417][T20411] Call Trace: [ 3471.973537][T20411] [ 3471.976315][T20411] dump_stack_lvl+0x151/0x1b7 [ 3471.980827][T20411] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3471.986324][T20411] dump_stack+0x15/0x17 [ 3471.990297][T20411] should_fail+0x3c6/0x510 [ 3471.994540][T20411] __should_failslab+0xa4/0xe0 [ 3471.999146][T20411] ? anon_vma_fork+0xf7/0x4e0 [ 3472.003651][T20411] should_failslab+0x9/0x20 [ 3472.007991][T20411] slab_pre_alloc_hook+0x37/0xd0 [ 3472.013128][T20411] ? anon_vma_fork+0xf7/0x4e0 [ 3472.017630][T20411] kmem_cache_alloc+0x44/0x200 [ 3472.022246][T20411] anon_vma_fork+0xf7/0x4e0 [ 3472.026570][T20411] ? anon_vma_name+0x4c/0x70 [ 3472.031004][T20411] ? vm_area_dup+0x17a/0x230 [ 3472.035427][T20411] copy_mm+0xa3a/0x13e0 [ 3472.039427][T20411] ? copy_signal+0x610/0x610 [ 3472.043940][T20411] ? __init_rwsem+0xd6/0x1c0 [ 3472.048357][T20411] ? copy_signal+0x4e3/0x610 [ 3472.052806][T20411] copy_process+0x1149/0x3290 [ 3472.057308][T20411] ? proc_fail_nth_write+0x20b/0x290 [ 3472.062607][T20411] ? fsnotify_perm+0x6a/0x5d0 [ 3472.067112][T20411] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3472.072051][T20411] ? vfs_write+0x9ec/0x1110 [ 3472.076390][T20411] kernel_clone+0x21e/0x9e0 [ 3472.080737][T20411] ? file_end_write+0x1c0/0x1c0 [ 3472.085502][T20411] ? create_io_thread+0x1e0/0x1e0 [ 3472.090369][T20411] ? mutex_unlock+0xb2/0x260 [ 3472.094787][T20411] ? __mutex_lock_slowpath+0x10/0x10 [ 3472.099925][T20411] __x64_sys_clone+0x23f/0x290 [ 3472.104524][T20411] ? __do_sys_vfork+0x130/0x130 [ 3472.109194][T20411] ? ksys_write+0x260/0x2c0 [ 3472.113543][T20411] ? debug_smp_processor_id+0x17/0x20 [ 3472.118743][T20411] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3472.124751][T20411] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3472.130219][T20411] do_syscall_64+0x3d/0xb0 [ 3472.134461][T20411] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3472.140354][T20411] RIP: 0033:0x7ff3418cfda9 [ 3472.144539][T20411] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3472.164152][T20411] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3472.172477][T20411] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:28 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000240)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) close(r0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000240)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r2, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) 13:14:28 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x195}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 13:14:28 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x10b}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3472.180290][T20411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3472.188104][T20411] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3472.195908][T20411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3472.203739][T20411] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3472.211638][T20411] [ 3472.256438][T20423] FAULT_INJECTION: forcing a failure. [ 3472.256438][T20423] name failslab, interval 1, probability 0, space 0, times 0 [ 3472.273104][T20423] CPU: 1 PID: 20423 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3472.283285][T20423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3472.293176][T20423] Call Trace: [ 3472.296288][T20423] [ 3472.299065][T20423] dump_stack_lvl+0x151/0x1b7 [ 3472.303578][T20423] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3472.309048][T20423] dump_stack+0x15/0x17 [ 3472.313042][T20423] should_fail+0x3c6/0x510 [ 3472.317303][T20423] __should_failslab+0xa4/0xe0 [ 3472.321895][T20423] ? vm_area_dup+0x26/0x230 [ 3472.326230][T20423] should_failslab+0x9/0x20 [ 3472.330575][T20423] slab_pre_alloc_hook+0x37/0xd0 [ 3472.335348][T20423] ? vm_area_dup+0x26/0x230 [ 3472.339694][T20423] kmem_cache_alloc+0x44/0x200 [ 3472.344292][T20423] vm_area_dup+0x26/0x230 [ 3472.348628][T20423] copy_mm+0x9a1/0x13e0 [ 3472.352623][T20423] ? copy_signal+0x610/0x610 [ 3472.357048][T20423] ? __init_rwsem+0xd6/0x1c0 [ 3472.361466][T20423] ? copy_signal+0x4e3/0x610 [ 3472.365911][T20423] copy_process+0x1149/0x3290 [ 3472.370415][T20423] ? proc_fail_nth_write+0x20b/0x290 [ 3472.375526][T20423] ? fsnotify_perm+0x6a/0x5d0 [ 3472.380037][T20423] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3472.384985][T20423] ? vfs_write+0x9ec/0x1110 [ 3472.389332][T20423] kernel_clone+0x21e/0x9e0 [ 3472.393673][T20423] ? file_end_write+0x1c0/0x1c0 [ 3472.398361][T20423] ? create_io_thread+0x1e0/0x1e0 [ 3472.403219][T20423] ? mutex_unlock+0xb2/0x260 [ 3472.407637][T20423] ? __mutex_lock_slowpath+0x10/0x10 [ 3472.412776][T20423] __x64_sys_clone+0x23f/0x290 [ 3472.417365][T20423] ? __do_sys_vfork+0x130/0x130 [ 3472.422045][T20423] ? ksys_write+0x260/0x2c0 [ 3472.426393][T20423] ? debug_smp_processor_id+0x17/0x20 [ 3472.431623][T20423] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3472.437494][T20423] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3472.442971][T20423] do_syscall_64+0x3d/0xb0 [ 3472.447218][T20423] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3472.452945][T20423] RIP: 0033:0x7ff3418cfda9 [ 3472.457316][T20423] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3472.476843][T20423] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3472.485344][T20423] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3472.493149][T20423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:28 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000240)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) close(r0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000240)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r2, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) 13:14:28 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x262}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:28 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000001180), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0xa, [@var={0xa, 0x0, 0x0, 0xe, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0xfffffffe}, @datasec={0xf, 0x3, 0x0, 0xf, 0x1, [{0x2, 0xfffff08c, 0x2}, {0x0, 0x1, 0xffff8001}, {0x3, 0x3, 0x6c11}], 'N'}]}, {0x0, [0x30, 0x61, 0x30, 0x30, 0x2e, 0x0, 0x30, 0x30]}}, &(0x7f00000009c0)=""/97, 0x72, 0x61, 0x1, 0xfffff4f7}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0xa, [@var={0xa, 0x0, 0x0, 0xe, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0xfffffffe}, @datasec={0xf, 0x3, 0x0, 0xf, 0x1, [{0x2, 0xfffff08c, 0x2}, {0x0, 0x1, 0xffff8001}, {0x3, 0x3, 0x6c11}], 'N'}]}, {0x0, [0x30, 0x61, 0x30, 0x30, 0x2e, 0x0, 0x30, 0x30]}}, &(0x7f00000009c0)=""/97, 0x72, 0x61, 0x1, 0xfffff4f7}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x10, 0x4, 0x8, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000000)="be"}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x19, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0xe7, 0xa1, &(0x7f0000000880)=""/161, 0x41100, 0x3, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x1, 0x6, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000ac0)=[r3], &(0x7f0000000b00)=[{0x3, 0x4, 0x9, 0x5}, {0x4, 0x5, 0xa, 0xc}, {0x5, 0x5, 0x7, 0x6}, {0x4, 0x4, 0x2, 0x1}, {0x1, 0x3, 0xf, 0x6}, {0x2, 0x5, 0x4, 0x8}, {0x2, 0x1, 0xe, 0xc}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x12ae}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() (async) getpid() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)) bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r4}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r4, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x13, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit]}, &(0x7f0000000d00)='syzkaller\x00', 0x90d6, 0x11, &(0x7f0000000d40)=""/17, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000f40)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r9, r0], &(0x7f0000000f80)=[{0x4, 0x5, 0x2, 0x2}, {0x3, 0x1, 0x8, 0xb}, {0x0, 0x2, 0x0, 0x2}], 0x10, 0x101}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d4d1d5ae52e4797d105e4a15822ee8b3a6aef99e91071cc6c191b1a88f01904b5070ddb8f0e0ce5db289e0133815f2d6b767d65d3545d391d667ad04fc761881939ac5b0daac8cd5f6fe246203c1a4be47cce4e6b09a61847bed0155e9dbcb5cb6f4305e4c8688db14dbac9a50b9569565fb616827dca95ef12ab0a14f1f86a5b38b4782f88738680affb4ba82e9df388e344e1edbfe0f2fa9e827b5d9ebb72b03b3fa3420a92119d122532f50a8587f8f0f0e480bd2c804149e0a4cc081b23f836b7ee5d22385478d1aa8b93a5fea98bf5f51edb7bb5aef4f5a36659924e412a6", 0xe1}], 0x1, 0x0, 0x0, 0x40080}, 0x4000004) (async) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d4d1d5ae52e4797d105e4a15822ee8b3a6aef99e91071cc6c191b1a88f01904b5070ddb8f0e0ce5db289e0133815f2d6b767d65d3545d391d667ad04fc761881939ac5b0daac8cd5f6fe246203c1a4be47cce4e6b09a61847bed0155e9dbcb5cb6f4305e4c8688db14dbac9a50b9569565fb616827dca95ef12ab0a14f1f86a5b38b4782f88738680affb4ba82e9df388e344e1edbfe0f2fa9e827b5d9ebb72b03b3fa3420a92119d122532f50a8587f8f0f0e480bd2c804149e0a4cc081b23f836b7ee5d22385478d1aa8b93a5fea98bf5f51edb7bb5aef4f5a36659924e412a6", 0xe1}], 0x1, 0x0, 0x0, 0x40080}, 0x4000004) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x0, 0x3, 0x31, 0x0, 0x7fffffff, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000003c0), 0x1}, 0x4250, 0x80000000000, 0x0, 0x4, 0xffff, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x80000001}, 0x0, 0x9, r5, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3f, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_config_ext={0x4, 0x7}, 0x1020, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4ee3f5a9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r11 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a12, 0x1, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0xd55, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000002c0)='@.[(-[\x00') recvmsg(r11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0) (async) recvmsg(r11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x6, 0x6, 0x5, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10100, 0x1000, 0x5, 0x5, 0x3, 0x4, 0x8, 0x0, 0x4, 0x0, 0x1}, r10, 0xb, r11, 0x2) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@exit, @jmp={0x5, 0x0, 0x6, 0x6, 0x3, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000e40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x6a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r6, 0xffffffffffffffff, r0, r8, r8, 0x1, r3], 0x0, 0x10, 0x200}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@exit, @jmp={0x5, 0x0, 0x6, 0x6, 0x3, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000e40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x6a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r6, 0xffffffffffffffff, r0, r8, r8, 0x1, r3], 0x0, 0x10, 0x200}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x7f, 0xff, 0x5, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x80, 0x3}, 0x104000, 0x8000, 0x5, 0x2, 0x5d7b6b16, 0x8, 0x9, 0x0, 0x20, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r12, 0x0, 0x4000000000000000}, 0x38) 13:14:28 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x118}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:28 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x138}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 3472.501049][T20423] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3472.508870][T20423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3472.516765][T20423] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3472.524835][T20423] [ 3472.572634][T20457] FAULT_INJECTION: forcing a failure. [ 3472.572634][T20457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3472.591984][T20457] CPU: 0 PID: 20457 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3472.602160][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3472.612052][T20457] Call Trace: [ 3472.615174][T20457] [ 3472.617962][T20457] dump_stack_lvl+0x151/0x1b7 [ 3472.622479][T20457] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3472.627942][T20457] dump_stack+0x15/0x17 [ 3472.632451][T20457] should_fail+0x3c6/0x510 [ 3472.636694][T20457] should_fail_alloc_page+0x5a/0x80 [ 3472.641744][T20457] prepare_alloc_pages+0x15c/0x700 [ 3472.646690][T20457] ? __alloc_pages_bulk+0xe40/0xe40 [ 3472.651718][T20457] __alloc_pages+0x18c/0x8f0 [ 3472.656152][T20457] ? prep_new_page+0x110/0x110 [ 3472.660749][T20457] get_zeroed_page+0x1b/0x40 [ 3472.665162][T20457] __pud_alloc+0x8b/0x260 [ 3472.669328][T20457] ? stack_trace_snprint+0xf0/0xf0 [ 3472.674280][T20457] ? do_handle_mm_fault+0x2330/0x2330 [ 3472.679485][T20457] ? __stack_depot_save+0x34/0x470 [ 3472.684435][T20457] ? anon_vma_clone+0x9a/0x500 [ 3472.689925][T20457] copy_page_range+0x2bcf/0x2f90 [ 3472.694694][T20457] ? __kasan_slab_alloc+0xb1/0xe0 [ 3472.699555][T20457] ? slab_post_alloc_hook+0x53/0x2c0 [ 3472.704671][T20457] ? copy_mm+0xa3a/0x13e0 [ 3472.708848][T20457] ? copy_process+0x1149/0x3290 [ 3472.713524][T20457] ? kernel_clone+0x21e/0x9e0 [ 3472.718037][T20457] ? __x64_sys_clone+0x23f/0x290 [ 3472.722818][T20457] ? do_syscall_64+0x3d/0xb0 [ 3472.727243][T20457] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3472.733414][T20457] ? pfn_valid+0x1e0/0x1e0 [ 3472.737662][T20457] ? rwsem_write_trylock+0x15b/0x290 [ 3472.742775][T20457] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 3472.749027][T20457] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3472.754665][T20457] ? __rb_insert_augmented+0x5de/0x610 [ 3472.759960][T20457] copy_mm+0xc7e/0x13e0 [ 3472.763964][T20457] ? copy_signal+0x610/0x610 [ 3472.768377][T20457] ? __init_rwsem+0xd6/0x1c0 [ 3472.772813][T20457] ? copy_signal+0x4e3/0x610 [ 3472.777235][T20457] copy_process+0x1149/0x3290 [ 3472.781753][T20457] ? proc_fail_nth_write+0x20b/0x290 [ 3472.786864][T20457] ? fsnotify_perm+0x6a/0x5d0 [ 3472.791379][T20457] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3472.796329][T20457] ? vfs_write+0x9ec/0x1110 [ 3472.800676][T20457] kernel_clone+0x21e/0x9e0 [ 3472.805010][T20457] ? file_end_write+0x1c0/0x1c0 [ 3472.810763][T20457] ? create_io_thread+0x1e0/0x1e0 [ 3472.815680][T20457] ? mutex_unlock+0xb2/0x260 [ 3472.820216][T20457] ? __mutex_lock_slowpath+0x10/0x10 [ 3472.825325][T20457] __x64_sys_clone+0x23f/0x290 [ 3472.829923][T20457] ? __do_sys_vfork+0x130/0x130 [ 3472.834609][T20457] ? ksys_write+0x260/0x2c0 [ 3472.838941][T20457] ? debug_smp_processor_id+0x17/0x20 [ 3472.844161][T20457] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3472.850050][T20457] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3472.855517][T20457] do_syscall_64+0x3d/0xb0 [ 3472.859769][T20457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3472.865506][T20457] RIP: 0033:0x7ff3418cfda9 [ 3472.869751][T20457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3472.889308][T20457] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3472.898230][T20457] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3472.906113][T20457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3472.913926][T20457] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 13:14:28 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x278}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0xf3, 0x40, 0x3f, 0x1, 0x0, 0x100000000, 0x8021c, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa7fb, 0x4, @perf_bp={&(0x7f0000000540), 0x4}, 0x1241b, 0x8, 0x3f, 0x1, 0x8, 0x0, 0x20, 0x0, 0x1000, 0x0, 0xfffffffffffff739}, 0xffffffffffffffff, 0x5, r2, 0xf5bc575b8b3f28) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x2, 0x1f, 0x3, 0x8, 0x0, 0x7f, 0x101, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000480), 0xb}, 0x100000, 0x9, 0x401, 0x8, 0x7, 0xaca4, 0x2, 0x0, 0x400080, 0x0, 0xc1}, r3, 0xffffffffffffffff, r2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x1d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd42, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8772, 0xff}, 0x10, 0x0, r1, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x1, 0xa, 0x5}, {0x4, 0x5, 0x8, 0x4}, {0x2, 0x1, 0xc, 0x1}, {0x1, 0x2, 0x2, 0xb}], 0x10, 0x5}, 0x90) 13:14:29 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x300}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3472.921749][T20457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3472.929556][T20457] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3472.937372][T20457] 13:14:29 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000001180), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0xa, [@var={0xa, 0x0, 0x0, 0xe, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0xfffffffe}, @datasec={0xf, 0x3, 0x0, 0xf, 0x1, [{0x2, 0xfffff08c, 0x2}, {0x0, 0x1, 0xffff8001}, {0x3, 0x3, 0x6c11}], 'N'}]}, {0x0, [0x30, 0x61, 0x30, 0x30, 0x2e, 0x0, 0x30, 0x30]}}, &(0x7f00000009c0)=""/97, 0x72, 0x61, 0x1, 0xfffff4f7}, 0x20) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x10, 0x4, 0x8, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000000)="be"}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x19, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0xe7, 0xa1, &(0x7f0000000880)=""/161, 0x41100, 0x3, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x1, 0x6, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000ac0)=[r3], &(0x7f0000000b00)=[{0x3, 0x4, 0x9, 0x5}, {0x4, 0x5, 0xa, 0xc}, {0x5, 0x5, 0x7, 0x6}, {0x4, 0x4, 0x2, 0x1}, {0x1, 0x3, 0xf, 0x6}, {0x2, 0x5, 0x4, 0x8}, {0x2, 0x1, 0xe, 0xc}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x12ae}, 0x90) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r4, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x13, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit]}, &(0x7f0000000d00)='syzkaller\x00', 0x90d6, 0x11, &(0x7f0000000d40)=""/17, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000f40)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r9, r0], &(0x7f0000000f80)=[{0x4, 0x5, 0x2, 0x2}, {0x3, 0x1, 0x8, 0xb}, {0x0, 0x2, 0x0, 0x2}], 0x10, 0x101}, 0x90) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d4d1d5ae52e4797d105e4a15822ee8b3a6aef99e91071cc6c191b1a88f01904b5070ddb8f0e0ce5db289e0133815f2d6b767d65d3545d391d667ad04fc761881939ac5b0daac8cd5f6fe246203c1a4be47cce4e6b09a61847bed0155e9dbcb5cb6f4305e4c8688db14dbac9a50b9569565fb616827dca95ef12ab0a14f1f86a5b38b4782f88738680affb4ba82e9df388e344e1edbfe0f2fa9e827b5d9ebb72b03b3fa3420a92119d122532f50a8587f8f0f0e480bd2c804149e0a4cc081b23f836b7ee5d22385478d1aa8b93a5fea98bf5f51edb7bb5aef4f5a36659924e412a6", 0xe1}], 0x1, 0x0, 0x0, 0x40080}, 0x4000004) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x0, 0x3, 0x31, 0x0, 0x7fffffff, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000003c0), 0x1}, 0x4250, 0x80000000000, 0x0, 0x4, 0xffff, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x80000001}, 0x0, 0x9, r5, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3f, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_config_ext={0x4, 0x7}, 0x1020, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4ee3f5a9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) r11 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a12, 0x1, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0xd55, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000002c0)='@.[(-[\x00') recvmsg(r11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x6, 0x6, 0x5, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10100, 0x1000, 0x5, 0x5, 0x3, 0x4, 0x8, 0x0, 0x4, 0x0, 0x1}, r10, 0xb, r11, 0x2) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@exit, @jmp={0x5, 0x0, 0x6, 0x6, 0x3, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000e40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x6a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r6, 0xffffffffffffffff, r0, r8, r8, 0x1, r3], 0x0, 0x10, 0x200}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x7f, 0xff, 0x5, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x80, 0x3}, 0x104000, 0x8000, 0x5, 0x2, 0x5d7b6b16, 0x8, 0x9, 0x0, 0x20, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r12, 0x0, 0x4000000000000000}, 0x38) 13:14:29 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x177}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 13:14:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0xf3, 0x40, 0x3f, 0x1, 0x0, 0x100000000, 0x8021c, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa7fb, 0x4, @perf_bp={&(0x7f0000000540), 0x4}, 0x1241b, 0x8, 0x3f, 0x1, 0x8, 0x0, 0x20, 0x0, 0x1000, 0x0, 0xfffffffffffff739}, 0xffffffffffffffff, 0x5, r2, 0xf5bc575b8b3f28) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x2, 0x1f, 0x3, 0x8, 0x0, 0x7f, 0x101, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000480), 0xb}, 0x100000, 0x9, 0x401, 0x8, 0x7, 0xaca4, 0x2, 0x0, 0x400080, 0x0, 0xc1}, r3, 0xffffffffffffffff, r2, 0xa) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x1d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd42, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8772, 0xff}, 0x10, 0x0, r1, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x1, 0xa, 0x5}, {0x4, 0x5, 0x8, 0x4}, {0x2, 0x1, 0xc, 0x1}, {0x1, 0x2, 0x2, 0xb}], 0x10, 0x5}, 0x90) (rerun: 32) 13:14:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x249}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3473.018300][T20479] FAULT_INJECTION: forcing a failure. [ 3473.018300][T20479] name failslab, interval 1, probability 0, space 0, times 0 [ 3473.033306][T20479] CPU: 1 PID: 20479 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3473.043467][T20479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3473.053367][T20479] Call Trace: [ 3473.056567][T20479] [ 3473.059362][T20479] dump_stack_lvl+0x151/0x1b7 [ 3473.063874][T20479] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3473.069326][T20479] dump_stack+0x15/0x17 [ 3473.073314][T20479] should_fail+0x3c6/0x510 [ 3473.077581][T20479] __should_failslab+0xa4/0xe0 [ 3473.082708][T20479] ? anon_vma_clone+0x9a/0x500 [ 3473.087296][T20479] should_failslab+0x9/0x20 [ 3473.091630][T20479] slab_pre_alloc_hook+0x37/0xd0 [ 3473.096404][T20479] ? anon_vma_clone+0x9a/0x500 [ 3473.101001][T20479] kmem_cache_alloc+0x44/0x200 [ 3473.105604][T20479] anon_vma_clone+0x9a/0x500 [ 3473.110035][T20479] anon_vma_fork+0x91/0x4e0 [ 3473.114368][T20479] ? anon_vma_name+0x4c/0x70 [ 3473.118793][T20479] ? vm_area_dup+0x17a/0x230 [ 3473.123220][T20479] copy_mm+0xa3a/0x13e0 [ 3473.127215][T20479] ? copy_signal+0x610/0x610 [ 3473.131637][T20479] ? __init_rwsem+0xd6/0x1c0 [ 3473.136065][T20479] ? copy_signal+0x4e3/0x610 [ 3473.140501][T20479] copy_process+0x1149/0x3290 [ 3473.145008][T20479] ? proc_fail_nth_write+0x20b/0x290 [ 3473.150137][T20479] ? fsnotify_perm+0x6a/0x5d0 [ 3473.154641][T20479] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3473.159587][T20479] ? vfs_write+0x9ec/0x1110 [ 3473.164029][T20479] kernel_clone+0x21e/0x9e0 [ 3473.168358][T20479] ? file_end_write+0x1c0/0x1c0 [ 3473.173066][T20479] ? create_io_thread+0x1e0/0x1e0 [ 3473.177900][T20479] ? mutex_unlock+0xb2/0x260 [ 3473.182443][T20479] ? __mutex_lock_slowpath+0x10/0x10 [ 3473.187564][T20479] __x64_sys_clone+0x23f/0x290 [ 3473.192150][T20479] ? __do_sys_vfork+0x130/0x130 [ 3473.196836][T20479] ? ksys_write+0x260/0x2c0 [ 3473.201189][T20479] ? debug_smp_processor_id+0x17/0x20 [ 3473.206399][T20479] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3473.212290][T20479] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3473.217891][T20479] do_syscall_64+0x3d/0xb0 [ 3473.222187][T20479] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3473.227905][T20479] RIP: 0033:0x7ff3418cfda9 [ 3473.232165][T20479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3473.252483][T20479] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3473.260726][T20479] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:29 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3a5}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) r3 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0xf3, 0x40, 0x3f, 0x1, 0x0, 0x100000000, 0x8021c, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa7fb, 0x4, @perf_bp={&(0x7f0000000540), 0x4}, 0x1241b, 0x8, 0x3f, 0x1, 0x8, 0x0, 0x20, 0x0, 0x1000, 0x0, 0xfffffffffffff739}, 0xffffffffffffffff, 0x5, r2, 0xf5bc575b8b3f28) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x2, 0x1f, 0x3, 0x8, 0x0, 0x7f, 0x101, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000480), 0xb}, 0x100000, 0x9, 0x401, 0x8, 0x7, 0xaca4, 0x2, 0x0, 0x400080, 0x0, 0xc1}, r3, 0xffffffffffffffff, r2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x1d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd42, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8772, 0xff}, 0x10, 0x0, r1, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x1, 0xa, 0x5}, {0x4, 0x5, 0x8, 0x4}, {0x2, 0x1, 0xc, 0x1}, {0x1, 0x2, 0x2, 0xb}], 0x10, 0x5}, 0x90) 13:14:29 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x500}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3473.268525][T20479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3473.276341][T20479] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3473.284148][T20479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3473.291967][T20479] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3473.299891][T20479] 13:14:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x2a4}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 13:14:29 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x600}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0xd46, 0x0}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x0, 0x6, 0x1, 0x7, 0x4, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @generic={0x3, 0x4, 0x2, 0x2, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1e}, @jmp={0x5, 0x0, 0xa, 0x6, 0x4, 0xffffffffffffffec, 0x28cabec76dad437a}, @jmp={0x5, 0x1, 0x7, 0x0, 0x4, 0xfffffffffffffff0, 0x1}]}, &(0x7f00000009c0)='syzkaller\x00', 0xffff, 0x5f, &(0x7f0000000a00)=""/95, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000a80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xd, 0x240, 0x20}, 0x10, 0x2a962, r2, 0x0, &(0x7f0000000b00)=[r0, r0, r2, r0, 0xffffffffffffffff], 0x0, 0x10, 0x767}, 0x90) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x63, 0x20}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0xd0, 0xffffffff, 0xfffffffc, 0xe94, 0x1, 0x3, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x12, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xdc0, 0x17, &(0x7f0000000800)=""/23, 0x1e00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x2, 0x2, 0x4, 0x9}, 0x10, r3, r4, 0x5, &(0x7f0000000dc0)=[r2, r5, r6, r7, r1], &(0x7f0000000e40)=[{0x2, 0x5, 0x7, 0x5}, {0x0, 0x2, 0xa, 0x2}, {0x2, 0x3, 0xc, 0x5}, {0x4, 0x4, 0xf, 0xa}, {0x1, 0x4, 0xc, 0xb}], 0x10, 0x49}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r8, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x6, 0x9, 0x2, 0x0, 0x2000, r8, 0x6, '\x00', r9, r8, 0x3, 0x0, 0x4}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x20, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff010000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000001a9010000100000085200000010000009500000000000000aca10400ffffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000e2ffffb603000000000000850000000c000000b70000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018410000fcffffff0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0xba, &(0x7f0000000480)=""/186, 0x40f00, 0x32, '\x00', r9, 0x25, r0, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0xcaf, 0xfbea}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[r10], &(0x7f0000000600)=[{0x0, 0x5, 0x10}, {0x0, 0x3, 0xe}, {0x5, 0x3, 0x8, 0xa}, {0x2, 0x1, 0xc, 0x177ef5dc236f8437}, {0x4, 0x4, 0x5, 0xa}], 0x10, 0x3f}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r5, &(0x7f0000000f80)="8b56ce9505d5a899e477be1bf223a0788b9e3da21ab5b68cfde3ec1b4ffecf64287475076d47bfc029572b61f4952b27cfd77b7f", &(0x7f0000000fc0)=""/151}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:29 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x300}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3473.408726][T20504] FAULT_INJECTION: forcing a failure. [ 3473.408726][T20504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3473.433935][T20504] CPU: 0 PID: 20504 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3473.444110][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3473.454009][T20504] Call Trace: [ 3473.457130][T20504] [ 3473.459914][T20504] dump_stack_lvl+0x151/0x1b7 [ 3473.464426][T20504] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3473.469880][T20504] dump_stack+0x15/0x17 [ 3473.473888][T20504] should_fail+0x3c6/0x510 [ 3473.478132][T20504] should_fail_alloc_page+0x5a/0x80 [ 3473.483166][T20504] prepare_alloc_pages+0x15c/0x700 [ 3473.488124][T20504] ? __alloc_pages_bulk+0xe40/0xe40 [ 3473.493231][T20504] __alloc_pages+0x18c/0x8f0 [ 3473.497668][T20504] ? prep_new_page+0x110/0x110 [ 3473.502273][T20504] ? __alloc_pages+0x27e/0x8f0 [ 3473.506848][T20504] ? __kasan_check_write+0x14/0x20 [ 3473.511803][T20504] ? _raw_spin_lock+0xa4/0x1b0 [ 3473.516416][T20504] pte_alloc_one+0x73/0x1b0 [ 3473.520784][T20504] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3473.525785][T20504] ? __pmd_alloc+0x48d/0x550 [ 3473.530240][T20504] __pte_alloc+0x86/0x350 [ 3473.534368][T20504] ? __pud_alloc+0x260/0x260 [ 3473.538940][T20504] ? __pud_alloc+0x213/0x260 [ 3473.543306][T20504] ? free_pgtables+0x280/0x280 [ 3473.547910][T20504] ? do_handle_mm_fault+0x2330/0x2330 [ 3473.553455][T20504] ? __stack_depot_save+0x34/0x470 [ 3473.558412][T20504] ? anon_vma_clone+0x9a/0x500 [ 3473.563024][T20504] copy_page_range+0x28a8/0x2f90 [ 3473.567788][T20504] ? __kasan_slab_alloc+0xb1/0xe0 [ 3473.572637][T20504] ? slab_post_alloc_hook+0x53/0x2c0 [ 3473.577774][T20504] ? kernel_clone+0x21e/0x9e0 [ 3473.582281][T20504] ? do_syscall_64+0x3d/0xb0 [ 3473.586704][T20504] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3473.592607][T20504] ? pfn_valid+0x1e0/0x1e0 [ 3473.596863][T20504] ? rwsem_write_trylock+0x15b/0x290 [ 3473.601987][T20504] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 3473.608344][T20504] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3473.613901][T20504] ? __rb_insert_augmented+0x5de/0x610 [ 3473.619178][T20504] copy_mm+0xc7e/0x13e0 [ 3473.623169][T20504] ? copy_signal+0x610/0x610 [ 3473.627599][T20504] ? __init_rwsem+0xd6/0x1c0 [ 3473.632022][T20504] ? copy_signal+0x4e3/0x610 [ 3473.636447][T20504] copy_process+0x1149/0x3290 [ 3473.640956][T20504] ? proc_fail_nth_write+0x20b/0x290 [ 3473.646077][T20504] ? fsnotify_perm+0x6a/0x5d0 [ 3473.650595][T20504] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3473.655806][T20504] ? vfs_write+0x9ec/0x1110 [ 3473.660159][T20504] kernel_clone+0x21e/0x9e0 [ 3473.664493][T20504] ? file_end_write+0x1c0/0x1c0 [ 3473.669166][T20504] ? create_io_thread+0x1e0/0x1e0 [ 3473.674025][T20504] ? mutex_unlock+0xb2/0x260 [ 3473.678468][T20504] ? __mutex_lock_slowpath+0x10/0x10 [ 3473.683586][T20504] __x64_sys_clone+0x23f/0x290 [ 3473.688193][T20504] ? __do_sys_vfork+0x130/0x130 [ 3473.692874][T20504] ? ksys_write+0x260/0x2c0 [ 3473.697215][T20504] ? debug_smp_processor_id+0x17/0x20 [ 3473.702413][T20504] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3473.708334][T20504] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3473.713775][T20504] do_syscall_64+0x3d/0xb0 [ 3473.718038][T20504] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3473.723758][T20504] RIP: 0033:0x7ff3418cfda9 [ 3473.728008][T20504] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3473.747459][T20504] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 13:14:30 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0xd46, 0x0}, 0x8) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x0, 0x6, 0x1, 0x7, 0x4, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @generic={0x3, 0x4, 0x2, 0x2, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1e}, @jmp={0x5, 0x0, 0xa, 0x6, 0x4, 0xffffffffffffffec, 0x28cabec76dad437a}, @jmp={0x5, 0x1, 0x7, 0x0, 0x4, 0xfffffffffffffff0, 0x1}]}, &(0x7f00000009c0)='syzkaller\x00', 0xffff, 0x5f, &(0x7f0000000a00)=""/95, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000a80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xd, 0x240, 0x20}, 0x10, 0x2a962, r2, 0x0, &(0x7f0000000b00)=[r0, r0, r2, r0, 0xffffffffffffffff], 0x0, 0x10, 0x767}, 0x90) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x63, 0x20}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0xd0, 0xffffffff, 0xfffffffc, 0xe94, 0x1, 0x3, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x12, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xdc0, 0x17, &(0x7f0000000800)=""/23, 0x1e00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x2, 0x2, 0x4, 0x9}, 0x10, r3, r4, 0x5, &(0x7f0000000dc0)=[r2, r5, r6, r7, r1], &(0x7f0000000e40)=[{0x2, 0x5, 0x7, 0x5}, {0x0, 0x2, 0xa, 0x2}, {0x2, 0x3, 0xc, 0x5}, {0x4, 0x4, 0xf, 0xa}, {0x1, 0x4, 0xc, 0xb}], 0x10, 0x49}, 0x90) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r8, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x6, 0x9, 0x2, 0x0, 0x2000, r8, 0x6, '\x00', r9, r8, 0x3, 0x0, 0x4}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x20, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff010000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000001a9010000100000085200000010000009500000000000000aca10400ffffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000e2ffffb603000000000000850000000c000000b70000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018410000fcffffff0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0xba, &(0x7f0000000480)=""/186, 0x40f00, 0x32, '\x00', r9, 0x25, r0, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0xcaf, 0xfbea}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[r10], &(0x7f0000000600)=[{0x0, 0x5, 0x10}, {0x0, 0x3, 0xe}, {0x5, 0x3, 0x8, 0xa}, {0x2, 0x1, 0xc, 0x177ef5dc236f8437}, {0x4, 0x4, 0x5, 0xa}], 0x10, 0x3f}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r5, &(0x7f0000000f80)="8b56ce9505d5a899e477be1bf223a0788b9e3da21ab5b68cfde3ec1b4ffecf64287475076d47bfc029572b61f4952b27cfd77b7f", &(0x7f0000000fc0)=""/151}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) (async, rerun: 64) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (rerun: 64) 13:14:30 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x700}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:30 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x354}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) [ 3473.755703][T20504] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3473.763526][T20504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3473.771420][T20504] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3473.779247][T20504] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3473.787042][T20504] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3473.794852][T20504] [ 3473.836247][T20525] FAULT_INJECTION: forcing a failure. [ 3473.836247][T20525] name failslab, interval 1, probability 0, space 0, times 0 [ 3473.848879][T20525] CPU: 0 PID: 20525 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3473.859000][T20525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3473.868889][T20525] Call Trace: [ 3473.872012][T20525] [ 3473.874789][T20525] dump_stack_lvl+0x151/0x1b7 [ 3473.879319][T20525] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3473.884771][T20525] dump_stack+0x15/0x17 [ 3473.888770][T20525] should_fail+0x3c6/0x510 [ 3473.893015][T20525] __should_failslab+0xa4/0xe0 [ 3473.897617][T20525] ? vm_area_dup+0x26/0x230 [ 3473.901969][T20525] should_failslab+0x9/0x20 [ 3473.906295][T20525] slab_pre_alloc_hook+0x37/0xd0 [ 3473.911070][T20525] ? vm_area_dup+0x26/0x230 [ 3473.915580][T20525] kmem_cache_alloc+0x44/0x200 [ 3473.920182][T20525] vm_area_dup+0x26/0x230 [ 3473.924364][T20525] copy_mm+0x9a1/0x13e0 [ 3473.928364][T20525] ? copy_signal+0x610/0x610 [ 3473.932770][T20525] ? __init_rwsem+0xd6/0x1c0 [ 3473.937214][T20525] ? copy_signal+0x4e3/0x610 [ 3473.941708][T20525] copy_process+0x1149/0x3290 [ 3473.946219][T20525] ? proc_fail_nth_write+0x20b/0x290 [ 3473.951340][T20525] ? fsnotify_perm+0x6a/0x5d0 [ 3473.955856][T20525] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3473.960800][T20525] ? vfs_write+0x9ec/0x1110 [ 3473.965143][T20525] kernel_clone+0x21e/0x9e0 [ 3473.969481][T20525] ? file_end_write+0x1c0/0x1c0 [ 3473.974166][T20525] ? create_io_thread+0x1e0/0x1e0 [ 3473.979126][T20525] ? mutex_unlock+0xb2/0x260 [ 3473.983563][T20525] ? __mutex_lock_slowpath+0x10/0x10 [ 3473.988670][T20525] __x64_sys_clone+0x23f/0x290 [ 3473.993358][T20525] ? __do_sys_vfork+0x130/0x130 [ 3473.998040][T20525] ? ksys_write+0x260/0x2c0 [ 3474.002383][T20525] ? debug_smp_processor_id+0x17/0x20 [ 3474.007586][T20525] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3474.013494][T20525] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3474.018957][T20525] do_syscall_64+0x3d/0xb0 [ 3474.023209][T20525] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3474.028937][T20525] RIP: 0033:0x7ff3418cfda9 [ 3474.033191][T20525] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3474.052739][T20525] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3474.061050][T20525] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3474.068868][T20525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3474.077291][T20525] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 13:14:30 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x900}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xff, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x2, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x34100) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, r7, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r6, r8, r9, r10, 0xffffffffffffffff, r8, r8]}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x18, 0x6, 0x3, 0x0, 0x8, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x1e, &(0x7f0000000240)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7606af40}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @generic={0x3f, 0x4, 0x1, 0x7, 0x7}, @alu={0x7, 0x1, 0x4, 0x9, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xcde}, @call={0x85, 0x0, 0x0, 0x2f}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x44, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x3, 0xffffff41, 0x20}, 0x10, r2, r0, 0x4, &(0x7f0000000840)=[r3, r4, r5, 0x1, r9, r11], &(0x7f0000000880)=[{0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x3, 0x9}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x1, 0x5, 0x8}], 0x10, 0x6}, 0x90) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40305839, &(0x7f0000000040)) write$cgroup_subtree(r13, &(0x7f00000001c0)=ANY=[], 0xda00) write$cgroup_type(r14, &(0x7f0000000140), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x40305839, &(0x7f0000000040)) 13:14:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) [ 3474.085095][T20525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3474.092906][T20525] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3474.100724][T20525] 13:14:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xff, 0x0}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x2, 0x8}, 0xc) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x34100) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r8) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, r7, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r6, r8, r9, r10, 0xffffffffffffffff, r8, r8]}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x18, 0x6, 0x3, 0x0, 0x8, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x1e, &(0x7f0000000240)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7606af40}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @generic={0x3f, 0x4, 0x1, 0x7, 0x7}, @alu={0x7, 0x1, 0x4, 0x9, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xcde}, @call={0x85, 0x0, 0x0, 0x2f}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x44, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x3, 0xffffff41, 0x20}, 0x10, r2, r0, 0x4, &(0x7f0000000840)=[r3, r4, r5, 0x1, r9, r11], &(0x7f0000000880)=[{0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x3, 0x9}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x1, 0x5, 0x8}], 0x10, 0x6}, 0x90) (async) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40305839, &(0x7f0000000040)) (async) write$cgroup_subtree(r13, &(0x7f00000001c0)=ANY=[], 0xda00) (async) write$cgroup_type(r14, &(0x7f0000000140), 0x9) (async) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x40305839, &(0x7f0000000040)) 13:14:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xff}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xff, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x2, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x34100) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r8) (async) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, r7, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r6, r8, r9, r10, 0xffffffffffffffff, r8, r8]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x18, 0x6, 0x3, 0x0, 0x8, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x18, 0x6, 0x3, 0x0, 0x8, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x1e, &(0x7f0000000240)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7606af40}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @generic={0x3f, 0x4, 0x1, 0x7, 0x7}, @alu={0x7, 0x1, 0x4, 0x9, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xcde}, @call={0x85, 0x0, 0x0, 0x2f}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x44, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x3, 0xffffff41, 0x20}, 0x10, r2, r0, 0x4, &(0x7f0000000840)=[r3, r4, r5, 0x1, r9, r11], &(0x7f0000000880)=[{0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x3, 0x9}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x1, 0x5, 0x8}], 0x10, 0x6}, 0x90) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) (async) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async) r13 = openat$cgroup_ro(r12, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40305839, &(0x7f0000000040)) write$cgroup_subtree(r13, &(0x7f00000001c0)=ANY=[], 0xda00) write$cgroup_type(r14, &(0x7f0000000140), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x40305839, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x40305839, &(0x7f0000000040)) [ 3474.135887][T20534] FAULT_INJECTION: forcing a failure. [ 3474.135887][T20534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3474.161975][T20534] CPU: 1 PID: 20534 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3474.172150][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3474.182058][T20534] Call Trace: [ 3474.185168][T20534] [ 3474.187944][T20534] dump_stack_lvl+0x151/0x1b7 [ 3474.192457][T20534] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3474.202533][T20534] dump_stack+0x15/0x17 [ 3474.207489][T20534] should_fail+0x3c6/0x510 [ 3474.211743][T20534] should_fail_alloc_page+0x5a/0x80 [ 3474.217805][T20534] prepare_alloc_pages+0x15c/0x700 [ 3474.222753][T20534] ? __alloc_pages+0x8f0/0x8f0 [ 3474.227353][T20534] ? __alloc_pages_bulk+0xe40/0xe40 [ 3474.232386][T20534] __alloc_pages+0x18c/0x8f0 [ 3474.236814][T20534] ? prep_new_page+0x110/0x110 [ 3474.241414][T20534] ? 0xffffffffa002a150 [ 3474.246110][T20534] ? is_bpf_text_address+0x172/0x190 [ 3474.251225][T20534] pte_alloc_one+0x73/0x1b0 [ 3474.255567][T20534] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3474.260602][T20534] ? arch_stack_walk+0xf3/0x140 [ 3474.265282][T20534] __pte_alloc+0x86/0x350 [ 3474.269450][T20534] ? free_pgtables+0x280/0x280 [ 3474.274051][T20534] ? _raw_spin_lock+0xa4/0x1b0 [ 3474.278647][T20534] ? __kasan_check_write+0x14/0x20 [ 3474.283619][T20534] copy_page_range+0x28a8/0x2f90 [ 3474.288385][T20534] ? __kasan_slab_alloc+0xb1/0xe0 [ 3474.293233][T20534] ? pfn_valid+0x1e0/0x1e0 [ 3474.297488][T20534] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 3474.303043][T20534] ? __rb_insert_augmented+0x5de/0x610 [ 3474.308353][T20534] copy_mm+0xc7e/0x13e0 [ 3474.312325][T20534] ? copy_signal+0x610/0x610 [ 3474.316933][T20534] ? __init_rwsem+0xd6/0x1c0 [ 3474.321355][T20534] ? copy_signal+0x4e3/0x610 [ 3474.325802][T20534] copy_process+0x1149/0x3290 [ 3474.330296][T20534] ? proc_fail_nth_write+0x20b/0x290 [ 3474.335423][T20534] ? fsnotify_perm+0x6a/0x5d0 [ 3474.339935][T20534] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3474.344875][T20534] ? vfs_write+0x9ec/0x1110 [ 3474.349217][T20534] kernel_clone+0x21e/0x9e0 [ 3474.353565][T20534] ? file_end_write+0x1c0/0x1c0 [ 3474.358241][T20534] ? create_io_thread+0x1e0/0x1e0 [ 3474.363109][T20534] ? mutex_unlock+0xb2/0x260 [ 3474.367552][T20534] ? __mutex_lock_slowpath+0x10/0x10 [ 3474.372649][T20534] __x64_sys_clone+0x23f/0x290 [ 3474.377253][T20534] ? __do_sys_vfork+0x130/0x130 [ 3474.381934][T20534] ? ksys_write+0x260/0x2c0 [ 3474.386277][T20534] ? debug_smp_processor_id+0x17/0x20 [ 3474.391493][T20534] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3474.397393][T20534] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3474.402969][T20534] do_syscall_64+0x3d/0xb0 [ 3474.407220][T20534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3474.413025][T20534] RIP: 0033:0x7ff3418cfda9 [ 3474.417282][T20534] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3474.436974][T20534] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3474.445216][T20534] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3474.453025][T20534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3474.460839][T20534] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3474.468650][T20534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3474.476460][T20534] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3474.484632][T20534] 13:14:30 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x365}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:30 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xa00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:30 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x37f}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:30 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000001f000717f15c67e5484d3802000001000001b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x0, 0x9, 0x1f, 0x0, 0x7, 0xa04, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x81}, 0x10000, 0xdf, 0x2, 0x5, 0x4, 0x9, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x2, r2, 0xb) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x17c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x412, 0x4, 0x0, 0x0, 0xdc08, 0x0, 0x9a, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r3, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xff, 0x1, 0x20, 0x5, 0x0, 0x30, 0x2000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0x1, 0x1000}, 0x100000, 0x9, 0x0, 0x7, 0x1f, 0x8001, 0x9, 0x0, 0x6, 0x0, 0x2}, r5, 0x9, r2, 0x1) r6 = perf_event_open(&(0x7f0000000680)={0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r4, 0x1) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) close(r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) 13:14:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 13:14:30 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xc00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3474.543829][T20561] FAULT_INJECTION: forcing a failure. [ 3474.543829][T20561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3474.562226][T20561] CPU: 1 PID: 20561 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3474.572541][T20561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3474.582434][T20561] Call Trace: [ 3474.585554][T20561] [ 3474.588330][T20561] dump_stack_lvl+0x151/0x1b7 [ 3474.592843][T20561] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3474.598311][T20561] dump_stack+0x15/0x17 [ 3474.602304][T20561] should_fail+0x3c6/0x510 [ 3474.606558][T20561] should_fail_alloc_page+0x5a/0x80 [ 3474.611591][T20561] prepare_alloc_pages+0x15c/0x700 [ 3474.616538][T20561] ? __alloc_pages_bulk+0xe40/0xe40 [ 3474.621670][T20561] __alloc_pages+0x18c/0x8f0 [ 3474.626085][T20561] ? prep_new_page+0x110/0x110 [ 3474.631209][T20561] get_zeroed_page+0x1b/0x40 [ 3474.635633][T20561] __pud_alloc+0x8b/0x260 [ 3474.639797][T20561] ? stack_trace_snprint+0xf0/0xf0 [ 3474.644750][T20561] ? do_handle_mm_fault+0x2330/0x2330 [ 3474.649960][T20561] ? __stack_depot_save+0x34/0x470 [ 3474.655074][T20561] ? anon_vma_clone+0x9a/0x500 [ 3474.659672][T20561] copy_page_range+0x2bcf/0x2f90 [ 3474.664453][T20561] ? __kasan_slab_alloc+0xb1/0xe0 [ 3474.669305][T20561] ? slab_post_alloc_hook+0x53/0x2c0 [ 3474.674428][T20561] ? copy_mm+0xa3a/0x13e0 [ 3474.678619][T20561] ? copy_process+0x1149/0x3290 [ 3474.683291][T20561] ? kernel_clone+0x21e/0x9e0 [ 3474.687799][T20561] ? __x64_sys_clone+0x23f/0x290 [ 3474.692573][T20561] ? do_syscall_64+0x3d/0xb0 [ 3474.696995][T20561] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3474.702921][T20561] ? pfn_valid+0x1e0/0x1e0 [ 3474.707157][T20561] ? rwsem_write_trylock+0x15b/0x290 [ 3474.712285][T20561] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 3474.718520][T20561] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3474.724089][T20561] ? __rb_insert_augmented+0x5de/0x610 [ 3474.729373][T20561] copy_mm+0xc7e/0x13e0 [ 3474.733361][T20561] ? copy_signal+0x610/0x610 [ 3474.737791][T20561] ? __init_rwsem+0xd6/0x1c0 [ 3474.742221][T20561] ? copy_signal+0x4e3/0x610 [ 3474.746639][T20561] copy_process+0x1149/0x3290 [ 3474.751153][T20561] ? proc_fail_nth_write+0x20b/0x290 [ 3474.756272][T20561] ? fsnotify_perm+0x6a/0x5d0 [ 3474.760785][T20561] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3474.765756][T20561] ? vfs_write+0x9ec/0x1110 [ 3474.770071][T20561] kernel_clone+0x21e/0x9e0 [ 3474.774411][T20561] ? file_end_write+0x1c0/0x1c0 [ 3474.779098][T20561] ? create_io_thread+0x1e0/0x1e0 [ 3474.783965][T20561] ? mutex_unlock+0xb2/0x260 [ 3474.788395][T20561] ? __mutex_lock_slowpath+0x10/0x10 [ 3474.793529][T20561] __x64_sys_clone+0x23f/0x290 [ 3474.798225][T20561] ? __do_sys_vfork+0x130/0x130 [ 3474.802923][T20561] ? ksys_write+0x260/0x2c0 [ 3474.807261][T20561] ? debug_smp_processor_id+0x17/0x20 [ 3474.812480][T20561] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3474.818361][T20561] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3474.823914][T20561] do_syscall_64+0x3d/0xb0 [ 3474.828168][T20561] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3474.833981][T20561] RIP: 0033:0x7ff3418cfda9 [ 3474.838245][T20561] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3474.857682][T20561] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3474.865923][T20561] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3474.873731][T20561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3474.881566][T20561] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 13:14:30 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x390}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0xd46, 0x0}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x0, 0x6, 0x1, 0x7, 0x4, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @generic={0x3, 0x4, 0x2, 0x2, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1e}, @jmp={0x5, 0x0, 0xa, 0x6, 0x4, 0xffffffffffffffec, 0x28cabec76dad437a}, @jmp={0x5, 0x1, 0x7, 0x0, 0x4, 0xfffffffffffffff0, 0x1}]}, &(0x7f00000009c0)='syzkaller\x00', 0xffff, 0x5f, &(0x7f0000000a00)=""/95, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000a80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xd, 0x240, 0x20}, 0x10, 0x2a962, r2, 0x0, &(0x7f0000000b00)=[r0, r0, r2, r0, 0xffffffffffffffff], 0x0, 0x10, 0x767}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x63, 0x20}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x63, 0x20}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0xd0, 0xffffffff, 0xfffffffc, 0xe94, 0x1, 0x3, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0x1}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0xd0, 0xffffffff, 0xfffffffc, 0xe94, 0x1, 0x3, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x12, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xdc0, 0x17, &(0x7f0000000800)=""/23, 0x1e00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x2, 0x2, 0x4, 0x9}, 0x10, r3, r4, 0x5, &(0x7f0000000dc0)=[r2, r5, r6, r7, r1], &(0x7f0000000e40)=[{0x2, 0x5, 0x7, 0x5}, {0x0, 0x2, 0xa, 0x2}, {0x2, 0x3, 0xc, 0x5}, {0x4, 0x4, 0xf, 0xa}, {0x1, 0x4, 0xc, 0xb}], 0x10, 0x49}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r8, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x6, 0x9, 0x2, 0x0, 0x2000, r8, 0x6, '\x00', r9, r8, 0x3, 0x0, 0x4}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x20, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff010000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000001a9010000100000085200000010000009500000000000000aca10400ffffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000e2ffffb603000000000000850000000c000000b70000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018410000fcffffff0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0xba, &(0x7f0000000480)=""/186, 0x40f00, 0x32, '\x00', r9, 0x25, r0, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0xcaf, 0xfbea}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[r10], &(0x7f0000000600)=[{0x0, 0x5, 0x10}, {0x0, 0x3, 0xe}, {0x5, 0x3, 0x8, 0xa}, {0x2, 0x1, 0xc, 0x177ef5dc236f8437}, {0x4, 0x4, 0x5, 0xa}], 0x10, 0x3f}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r5, &(0x7f0000000f80)="8b56ce9505d5a899e477be1bf223a0788b9e3da21ab5b68cfde3ec1b4ffecf64287475076d47bfc029572b61f4952b27cfd77b7f", &(0x7f0000000fc0)=""/151}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r5, &(0x7f0000000f80)="8b56ce9505d5a899e477be1bf223a0788b9e3da21ab5b68cfde3ec1b4ffecf64287475076d47bfc029572b61f4952b27cfd77b7f", &(0x7f0000000fc0)=""/151}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3474.889529][T20561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3474.898053][T20561] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3474.909000][T20561] 13:14:31 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xd00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00753fd558a200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x4, 0xff, 0x1, 0x0, 0x7ff, 0x8608d, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10080, 0x7, 0x12, 0xcda94e606e0138e1, 0x10001, 0x1, 0xe4a, 0x0, 0x5, 0x0, 0x100}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x40, 0xfd, 0x8, 0x0, 0x2, 0x1800, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x4}, 0x1110, 0xe7, 0x5, 0x0, 0xa0c, 0x7, 0x1, 0x0, 0xc1e, 0x0, 0x7f32d34a}, r1, 0x6, r2, 0x2) 13:14:31 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3bf}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:31 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xf00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 13:14:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00753fd558a200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x4, 0xff, 0x1, 0x0, 0x7ff, 0x8608d, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10080, 0x7, 0x12, 0xcda94e606e0138e1, 0x10001, 0x1, 0xe4a, 0x0, 0x5, 0x0, 0x100}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x40, 0xfd, 0x8, 0x0, 0x2, 0x1800, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x4}, 0x1110, 0xe7, 0x5, 0x0, 0xa0c, 0x7, 0x1, 0x0, 0xc1e, 0x0, 0x7f32d34a}, r1, 0x6, r2, 0x2) 13:14:31 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3cd}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:31 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x1400}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3475.075654][T20577] FAULT_INJECTION: forcing a failure. [ 3475.075654][T20577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3475.091999][T20577] CPU: 0 PID: 20577 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3475.102251][T20577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3475.112424][T20577] Call Trace: [ 3475.115524][T20577] [ 3475.118311][T20577] dump_stack_lvl+0x151/0x1b7 [ 3475.122900][T20577] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3475.128372][T20577] dump_stack+0x15/0x17 [ 3475.132457][T20577] should_fail+0x3c6/0x510 [ 3475.136720][T20577] should_fail_alloc_page+0x5a/0x80 [ 3475.141932][T20577] prepare_alloc_pages+0x15c/0x700 [ 3475.146885][T20577] ? __alloc_pages_bulk+0xe40/0xe40 [ 3475.151911][T20577] __alloc_pages+0x18c/0x8f0 [ 3475.156343][T20577] ? prep_new_page+0x110/0x110 [ 3475.161118][T20577] ? __alloc_pages+0x27e/0x8f0 [ 3475.165720][T20577] ? __kasan_check_write+0x14/0x20 [ 3475.170740][T20577] ? _raw_spin_lock+0xa4/0x1b0 [ 3475.175343][T20577] __pmd_alloc+0xb1/0x550 [ 3475.179513][T20577] ? __pud_alloc+0x260/0x260 [ 3475.183942][T20577] ? __pud_alloc+0x213/0x260 [ 3475.188364][T20577] ? do_handle_mm_fault+0x2330/0x2330 [ 3475.194003][T20577] ? __stack_depot_save+0x34/0x470 [ 3475.198948][T20577] ? anon_vma_clone+0x9a/0x500 [ 3475.203549][T20577] copy_page_range+0x2b3d/0x2f90 [ 3475.208322][T20577] ? __kasan_slab_alloc+0xb1/0xe0 [ 3475.213278][T20577] ? slab_post_alloc_hook+0x53/0x2c0 [ 3475.218411][T20577] ? copy_mm+0xa3a/0x13e0 [ 3475.222564][T20577] ? copy_process+0x1149/0x3290 [ 3475.227259][T20577] ? kernel_clone+0x21e/0x9e0 [ 3475.232041][T20577] ? do_syscall_64+0x3d/0xb0 [ 3475.236466][T20577] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3475.242363][T20577] ? pfn_valid+0x1e0/0x1e0 [ 3475.246607][T20577] ? rwsem_write_trylock+0x15b/0x290 [ 3475.251739][T20577] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 3475.258062][T20577] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3475.263703][T20577] ? __rb_insert_augmented+0x5de/0x610 [ 3475.269088][T20577] copy_mm+0xc7e/0x13e0 [ 3475.273092][T20577] ? copy_signal+0x610/0x610 [ 3475.277509][T20577] ? __init_rwsem+0xd6/0x1c0 [ 3475.281931][T20577] ? copy_signal+0x4e3/0x610 [ 3475.286356][T20577] copy_process+0x1149/0x3290 [ 3475.290868][T20577] ? proc_fail_nth_write+0x20b/0x290 [ 3475.295988][T20577] ? fsnotify_perm+0x6a/0x5d0 [ 3475.300509][T20577] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3475.305535][T20577] ? vfs_write+0x9ec/0x1110 [ 3475.309964][T20577] kernel_clone+0x21e/0x9e0 [ 3475.314303][T20577] ? file_end_write+0x1c0/0x1c0 [ 3475.318991][T20577] ? create_io_thread+0x1e0/0x1e0 [ 3475.324021][T20577] ? mutex_unlock+0xb2/0x260 [ 3475.328450][T20577] ? __mutex_lock_slowpath+0x10/0x10 [ 3475.333568][T20577] __x64_sys_clone+0x23f/0x290 [ 3475.338169][T20577] ? __do_sys_vfork+0x130/0x130 [ 3475.342857][T20577] ? ksys_write+0x260/0x2c0 [ 3475.347295][T20577] ? debug_smp_processor_id+0x17/0x20 [ 3475.352499][T20577] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3475.358401][T20577] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3475.363862][T20577] do_syscall_64+0x3d/0xb0 [ 3475.368118][T20577] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3475.373841][T20577] RIP: 0033:0x7ff3418cfda9 [ 3475.378095][T20577] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3475.397534][T20577] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3475.405791][T20577] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3475.413604][T20577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:31 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000001f000717f15c67e5484d3802000001000001b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x0, 0x9, 0x1f, 0x0, 0x7, 0xa04, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x81}, 0x10000, 0xdf, 0x2, 0x5, 0x4, 0x9, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x2, r2, 0xb) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x17c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x412, 0x4, 0x0, 0x0, 0xdc08, 0x0, 0x9a, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r3, 0x0) (async) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = gettid() perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xff, 0x1, 0x20, 0x5, 0x0, 0x30, 0x2000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0x1, 0x1000}, 0x100000, 0x9, 0x0, 0x7, 0x1f, 0x8001, 0x9, 0x0, 0x6, 0x0, 0x2}, r5, 0x9, r2, 0x1) (async) r6 = perf_event_open(&(0x7f0000000680)={0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r4, 0x1) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) close(r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) 13:14:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 13:14:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00753fd558a200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x4, 0xff, 0x1, 0x0, 0x7ff, 0x8608d, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10080, 0x7, 0x12, 0xcda94e606e0138e1, 0x10001, 0x1, 0xe4a, 0x0, 0x5, 0x0, 0x100}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x40, 0xfd, 0x8, 0x0, 0x2, 0x1800, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x4}, 0x1110, 0xe7, 0x5, 0x0, 0xa0c, 0x7, 0x1, 0x0, 0xc1e, 0x0, 0x7f32d34a}, r1, 0x6, r2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00753fd558a200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x4, 0xff, 0x1, 0x0, 0x7ff, 0x8608d, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10080, 0x7, 0x12, 0xcda94e606e0138e1, 0x10001, 0x1, 0xe4a, 0x0, 0x5, 0x0, 0x100}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x40, 0xfd, 0x8, 0x0, 0x2, 0x1800, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x4}, 0x1110, 0xe7, 0x5, 0x0, 0xa0c, 0x7, 0x1, 0x0, 0xc1e, 0x0, 0x7f32d34a}, r1, 0x6, r2, 0x2) (async) 13:14:31 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3da}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3475.421402][T20577] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3475.429213][T20577] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3475.437370][T20577] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3475.445193][T20577] 13:14:31 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x1800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:31 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000001f000717f15c67e5484d3802000001000001b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x0, 0x9, 0x1f, 0x0, 0x7, 0xa04, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x81}, 0x10000, 0xdf, 0x2, 0x5, 0x4, 0x9, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x2, r2, 0xb) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x17c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x412, 0x4, 0x0, 0x0, 0xdc08, 0x0, 0x9a, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r3, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = gettid() perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xff, 0x1, 0x20, 0x5, 0x0, 0x30, 0x2000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0x1, 0x1000}, 0x100000, 0x9, 0x0, 0x7, 0x1f, 0x8001, 0x9, 0x0, 0x6, 0x0, 0x2}, r5, 0x9, r2, 0x1) (async) r6 = perf_event_open(&(0x7f0000000680)={0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r4, 0x1) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) close(r6) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) [ 3475.483708][T20591] FAULT_INJECTION: forcing a failure. [ 3475.483708][T20591] name failslab, interval 1, probability 0, space 0, times 0 [ 3475.507906][T20591] CPU: 1 PID: 20591 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3475.518170][T20591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3475.528061][T20591] Call Trace: [ 3475.531195][T20591] [ 3475.533966][T20591] dump_stack_lvl+0x151/0x1b7 [ 3475.538480][T20591] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3475.544035][T20591] dump_stack+0x15/0x17 [ 3475.548020][T20591] should_fail+0x3c6/0x510 [ 3475.552277][T20591] __should_failslab+0xa4/0xe0 [ 3475.556872][T20591] ? vm_area_dup+0x26/0x230 [ 3475.562279][T20591] should_failslab+0x9/0x20 [ 3475.566899][T20591] slab_pre_alloc_hook+0x37/0xd0 [ 3475.571673][T20591] ? vm_area_dup+0x26/0x230 [ 3475.576002][T20591] kmem_cache_alloc+0x44/0x200 [ 3475.580604][T20591] vm_area_dup+0x26/0x230 [ 3475.584943][T20591] copy_mm+0x9a1/0x13e0 [ 3475.589197][T20591] ? copy_signal+0x610/0x610 [ 3475.593621][T20591] ? __init_rwsem+0xd6/0x1c0 [ 3475.598052][T20591] ? copy_signal+0x4e3/0x610 [ 3475.602474][T20591] copy_process+0x1149/0x3290 [ 3475.606990][T20591] ? proc_fail_nth_write+0x20b/0x290 [ 3475.612282][T20591] ? fsnotify_perm+0x6a/0x5d0 [ 3475.616792][T20591] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3475.621740][T20591] ? vfs_write+0x9ec/0x1110 [ 3475.626081][T20591] kernel_clone+0x21e/0x9e0 [ 3475.630611][T20591] ? file_end_write+0x1c0/0x1c0 [ 3475.635372][T20591] ? create_io_thread+0x1e0/0x1e0 [ 3475.640235][T20591] ? mutex_unlock+0xb2/0x260 [ 3475.644674][T20591] ? __mutex_lock_slowpath+0x10/0x10 [ 3475.649799][T20591] __x64_sys_clone+0x23f/0x290 [ 3475.654388][T20591] ? __do_sys_vfork+0x130/0x130 [ 3475.659067][T20591] ? ksys_write+0x260/0x2c0 [ 3475.663405][T20591] ? debug_smp_processor_id+0x17/0x20 [ 3475.668610][T20591] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3475.674513][T20591] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3475.680180][T20591] do_syscall_64+0x3d/0xb0 [ 3475.684424][T20591] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3475.690319][T20591] RIP: 0033:0x7ff3418cfda9 [ 3475.694579][T20591] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3475.714543][T20591] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3475.726524][T20591] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3ee}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:32 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x62d1a4a0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9022}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3475.734777][T20591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3475.742971][T20591] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3475.752659][T20591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3475.761580][T20591] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3475.770695][T20591] 13:14:32 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x1801}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 13:14:32 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x62d1a4a0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9022}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x62d1a4a0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9022}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3fa}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x500}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3475.859126][T20624] FAULT_INJECTION: forcing a failure. [ 3475.859126][T20624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3475.872644][T20624] CPU: 0 PID: 20624 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3475.882797][T20624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3475.892891][T20624] Call Trace: [ 3475.895991][T20624] [ 3475.899028][T20624] dump_stack_lvl+0x151/0x1b7 [ 3475.903538][T20624] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3475.909004][T20624] dump_stack+0x15/0x17 [ 3475.912996][T20624] should_fail+0x3c6/0x510 [ 3475.917251][T20624] should_fail_alloc_page+0x5a/0x80 [ 3475.922285][T20624] prepare_alloc_pages+0x15c/0x700 [ 3475.927578][T20624] ? __alloc_pages+0x8f0/0x8f0 [ 3475.932176][T20624] ? __alloc_pages_bulk+0xe40/0xe40 [ 3475.937211][T20624] __alloc_pages+0x18c/0x8f0 [ 3475.941642][T20624] ? prep_new_page+0x110/0x110 [ 3475.946253][T20624] ? 0xffffffffa0028b78 [ 3475.950767][T20624] ? is_bpf_text_address+0x172/0x190 [ 3475.956684][T20624] pte_alloc_one+0x73/0x1b0 [ 3475.962333][T20624] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3475.967359][T20624] ? arch_stack_walk+0xf3/0x140 [ 3475.972055][T20624] __pte_alloc+0x86/0x350 [ 3475.976215][T20624] ? free_pgtables+0x280/0x280 [ 3475.980883][T20624] ? _raw_spin_lock+0xa4/0x1b0 [ 3475.985424][T20624] ? __kasan_check_write+0x14/0x20 [ 3475.990373][T20624] copy_page_range+0x28a8/0x2f90 [ 3475.995139][T20624] ? __kasan_slab_alloc+0xb1/0xe0 [ 3476.000003][T20624] ? pfn_valid+0x1e0/0x1e0 [ 3476.004247][T20624] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 3476.010761][T20624] copy_mm+0xc7e/0x13e0 [ 3476.014752][T20624] ? copy_signal+0x610/0x610 [ 3476.019174][T20624] ? __init_rwsem+0xd6/0x1c0 [ 3476.023601][T20624] ? copy_signal+0x4e3/0x610 [ 3476.028030][T20624] copy_process+0x1149/0x3290 [ 3476.032554][T20624] ? proc_fail_nth_write+0x20b/0x290 [ 3476.037684][T20624] ? fsnotify_perm+0x6a/0x5d0 [ 3476.042176][T20624] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3476.047209][T20624] ? vfs_write+0x9ec/0x1110 [ 3476.051557][T20624] kernel_clone+0x21e/0x9e0 [ 3476.055891][T20624] ? file_end_write+0x1c0/0x1c0 [ 3476.060592][T20624] ? create_io_thread+0x1e0/0x1e0 [ 3476.065443][T20624] ? mutex_unlock+0xb2/0x260 [ 3476.069859][T20624] ? __mutex_lock_slowpath+0x10/0x10 [ 3476.075170][T20624] __x64_sys_clone+0x23f/0x290 [ 3476.079786][T20624] ? __do_sys_vfork+0x130/0x130 [ 3476.084553][T20624] ? ksys_write+0x260/0x2c0 [ 3476.089015][T20624] ? debug_smp_processor_id+0x17/0x20 [ 3476.094386][T20624] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3476.100315][T20624] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3476.105849][T20624] do_syscall_64+0x3d/0xb0 [ 3476.110097][T20624] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3476.115829][T20624] RIP: 0033:0x7ff3418cfda9 [ 3476.120079][T20624] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3476.139705][T20624] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3476.147935][T20624] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:32 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x62d1a4a0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9022}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x600}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:32 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x1900}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x2, 0x1, 0x2, 0x6, 0x8, 0xffffffffffffffe0, 0x1}, @map_fd={0x18, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xe5b6, 0x54, &(0x7f00000000c0)=""/84, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x2, 0x9, 0xa}], 0x10, 0x3}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='net_dev_start_xmit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x9, 0x1e3308d3, 0x808, 0x1, 0x7, '\x00', 0x0, r2, 0x2, 0x2, 0x2}, 0x48) r4 = syz_clone(0x20000880, &(0x7f0000000480)="3746535763646f99eb62b3f9bd8d3174e1d102a21a078f2fed2856138224ad5bbbfe70c68d2222dd1b54f3492daae5870da01f63bb4a5a78d2a692ce1bb0e9d6726d25bcfc1c5d4571afdb9e0177215a107085ca5dabd9bf25fdca9720ffd6fb1325604989f7c7fcc6d0bfcdc6b9ac9798f0f223dd7048719c3126bf83d6aeac6438a339f3c1c1baafb94bbb1011f78a0a7f474edefca1012d6e298acefef5bf63b04fe3cfd78062ddb7e96216ad3418c9a28b0acc0df66e9f651b650265be86fbdcf78917a0fd60ce4ece46f97c248cfae382c6c41b72fc61369931fb9cf51c2dc6ca1482535bf038dd537cbd1df12f8f5f2a3ab8effe1ddb2cbb911fbac373e13489f89833539b42de5bab92b4937b615a6c13ac44717a12f19d2c92b59f665677fed305a59c43ebe569bd2ef995fa1c66a7023461fd58d5f0925fb9a35221b7e928ad59db295ccc5a3fc06c42e0018340190fbd70339f0ab1dea382121def5cc4d7c940ad1ce69a9d38b86965ccd2942e92668d8a4bad735a0b52b63af475e72c05974d83349d1f7254c592812c7e5d52d24bcc049814e9703d29a5ed3914da0d93ff1f2f66cd020231732763ac850e1f6f095463f0e8117f29a8c0155d2c4c3b7be810e1c97c803384b05870d1525abcece32b47b8a0f3dffd584383ed86217ed10eeadc5eec77d40b9ad913ca6e4a1a6b00056650cf69ade08cff816f331a6fc61f8d2a75f501bf22fac6f675ffcbff88dfc1cc5b688faed0ea84eaa38f431e621c71f699787d12b3f7ec50d0f6daa9a5e4dcbbbd4274f5e3dada8509981ef347b905881435d3c6d3e1161043995ea9c75f0b8aa8fa13df36855b41bf1847d7987c732c0a1e02bdaa9b31b487fec05e66f2d0cfdc090ef0b1bbdc16c188d105f52088af67670167a339fc9bc202150790c1e2a7fb0643b24070757c589fec830fcf67294909c4c50e3fa0c7474a8560d8f0aaf9ef8bcbcd995273fd5fbfab6f69f8001c5fb7b9d04cef616dacf61d3e5e5858595365aea6f20887061c368afef6e0a4ec0267593f9b0d6a3b0ef70569ccaf0a8bdd8b5ba15fda98ced32e1e9afd3ad785c92d87530ff73a339a39d5a57a932c8498155b1d252560857c71dbc289a080be2c2ab65df5c967a9769e72c5e42638e4f2faae1644ae94e26cfebda5be283738acf520c772a1f7cbb599f8492effa904a5ef628e57f39cd98424cde8a15f925e26ebd96e8ac839efbd2073b4eb45c0e5a71c109fea3d50d01bdd76be316c976d12c8ee77addfb57211deee78072a8286083d5793c65ddc4fbc79ec3eb4e99c0b04c7608372adb2567ddbdf0592cc3f9ac953baa2699152beb6a40f5c29189dc7df8928038503b740d0f3ee3dd6f7834bc9d211c522032955e2932223d5abdb8df672d7026b8489b4847a885d49c2e43d01ecd8976840faa44fe9059868ecdf7159e08d8c15863d4454e24d8ea3529ec76ddaadb0fbcf0c9760e674518d8a74f5001848e0ce7d9532d7d72ec8a6b4e7385f2009b3b6394d552f971d44d4cf0396d06acfbab01dc25e51b71829a5c38f880816a20154712367fecf08bf69bc2a1efaa7af85891ee911d8502356c7622ceec6b699a9590fb3dc7f003fd6d05c3b5a5e242fc497d78d21c7f6871ca30e2854b086bed2518765be0a30d136320db296bcdb032b75dd6d1fe81b23b39dc074450617a69708ceee716fc4b3778106f949b9cb11653e9a46dabd7702764ef9e77ad0ed79dabf621a78c9a1f9e35e5fa6ebb2ca39b4fe1f9feb58f89bb2e4b753d7943a251873e001e15371fd972cb1ec2e46c5b2e6d7090842efd549de8913e5cefc24ad27de89849d04ff52b787a46ffd7f27aafa9f5c3cb98d7e24d3a9e6e3c85bafbe3ae85584b26862d524a84aa1eaa0b95fa5c020745b4d3401eaf4df5be0212b0b2f9448ec958c705216647d4858b68f69b2f88ea4bda0d47582529541c23456c4d4aaeaa36683b412adf6482158187c138f72c1b8297bf1c624fc08402e540c3b74722bb9f91f849b4545da46d44ad04e307449531a5702790035db1258861e6a5b1e11b6f144b603c513301e9a30df86316041bdac92e3789fbd42eca066ca6bfba28f6b61b8333534e2e667fa42bf6526b974d42b56b71a000ee0e5af280a5e0012da6e5c654437509c81c3579ef5bd97c525377ebd337690646c4cb58201681b7829c7bfe6fe3172f626dac5572528322a96c95591f23d28ae0aef38cf90eccdfec9b11f4db0a1f97e8574da3b32b229bf7109082cf1bf1ee68c88a2d67851c7e5bbc4c44553cc69d6d350b5c1aeb821b5d28d4178dafef5680245b632643f6482052605a31525030dc78b42da7c369251401d7a3db17db962de808179222fc9c8c017e7c199369bf3ff9e119824c6ec91358a0bb137ad4108d4634eebedd1a2a297b052ea60c2e2bd60f90cff35a4f47908238f41680ccb273f1fe550ca88e040141e3cadd1b949fbf89c4ac5968e03d230b032573f50d8420a3b17800092b7ae1f33de5b28ee4c0dc077a28a2c35d4dd7ffa577889f7d51010c7c96f458cc565b497a74370abf7975db606819367a7b5be038436e974806cdea1aab3d1ffe894440e92f78ad69c8755f5a2030945eaed9db40918e86386b0d25c0814604b250ac0525d792988eccfd3bbce68885f28d1eefeb3998f31567cbca24dd96ed596aa3a6f9141ca92859ad7ffc4dddd5fdfc1bebeb383c7e8cfeaf18fe6f199b71fe8d5f285dd12d5250403c8213ad8c7f0ea3d1c641bc3832a7b4fe0bf3da4535b357ecb167b034d11be512c1add559fca30465551265fe21478fe222d63c4094ede1c6ea64354150313499838616459fba2f83d992e73f5b6513c26f156000a012e8c29cfb6f38595b389df86e8cf31060002398be1d42924272018fdc0f58754e594713e0d7b4e0b052fabf7a8f677ed072361298abc0f683a83fe1cd0ed8f0a36201fbbb86b1d5667d4d8e36a18f8b95c6970654a118be47d6c041eac620a57c55bfa1a4e4f38ff087329fbfdd1f7114b423f0f90f0baed581b893dd0d0a3d75199ade5b2cb01287c5682fa7202a1002d749001847ff240908910cf54caab5da873de0b6424c067555ecbca19a3c37690f1de1e779c30bcb28ca69f998ca0adabaf0161b7e82c5afecc04a26ef5c5092dc2bf43f17af9b61304085f7e1dba21d0564cf8664c63f0db0340fdaa99565b8efb97ab58c00d77e194ca115b912e21bbb9e0ff33640fe9b6f04ebf151ded9c37b898db0764348e6a16d7ca73ba71d39eb05423eba4b7e684212c183364e9015c0923b3a61a47764b2514fcc231d7b701255f0efb43050b61d6cdc3b35ff0623ae75277fb09446061a2eb59e4fccfa7d98f48cb8e385e99a5f40e8f4be236e8d6c0b272a346244910cf3c99418a975cc5e2e983803ce8514a0e210ad138785996551de3ce264b6e061e0135cb72ea36453b07878c5b1b7995852c14d999b598fb5d7df6f4c7ab7139b266df2a64c8ce37e34f5848008900906d5a0e27f9b4719ca9629bf0e83ea917a119de10448c70449d54010d8300938e13c8e53cddfc7be08e0acfc04f1b4ee16aea329761b83e31818174be2ee6127aaab605ea2381195ed71efbc2b68f8a3896b08b636979221a02cf14df5575f3df9631b5201384a11af3027b83ceb82fe5a64f90dc3cb3c81dcab06708bc1d5bbfe45d76611b2c79b03fbf8e82f1f9574888c824c4be611eef64b7096a819ef7e94028d3281502d0a9121b2aa0b75d86b9bef2cf84d2361c7c48febfeef2512a78bcc7e58fb8789e7f270c743f90a422d4492bf2f86042af79b611d64fec7db342df016b4ec42c479fb5a15199173f98e69aa4d977e3f07bf3f677cb462cc7b3e463ad63b12175131077f3e04903ede11b19aa2bdfcbd0050a498e1466f211bbff999b8ce0b244b9e4d49fd88000c3901d9fe31db0e83ba4eebf9a6ef481b670acac3503d65ad8493010a0f811eeeb989e21494f918bd02cc86039d5e4ef108d563d381e802972a6e4da45c18ed80b89f8e7f6afd2da3554f866ec68c7e7be933326a4f929339842c4b57608281633fff08af6b8078f3de833903ff2f391daaf489647dd42b15a98d7873fbe6d9f0f080ec10b9c8d99e9a181fd3606ce579de1a8e6d625346ed49226a0fca5da36689d4f8db88916677079c4df3507b7459b06f9a20dde52e8c37d96cc2d0ddf934cde562e38e6671d6b05d7e8802f8af7b0e48df529efbbaeccc73ba6681b116a76d78321fceeee497e3bf6fafa741c315438ef3d247c635724675b282d5d3bb26117d901ce67ffcbe889f5eb5b2b339c79591649b4bcb6658037016bb68e369ff2f023138c5f689f28102d7f69e9f89aef7b06f92f704945fd6dd62bfb2abe2398272f701b49630d99b64438db53448f6c9a9dc0cd338dcf5615e30235adb7e3359ffe1e583b5be271cac3462934370e28aea9a690e0db88a89cc0518c02a9821c1346f822ab46bbd3759ba79b1e14e393ef9f3f762baf123b03948378b9d586878388f776b262e836f15cd6070461f8912881ad031aa543e021b9836db8f8b19de38ec1c7d19db307b2e14ed5988e7e8b361e7f0161fc6aee1418f21220e6e77e69a280c5aec2f1cb48103a66570d6295ef934b068ca766e7fe62026e3a04c05329811b301cdca6069e1d6cff7d49b865a4f7db6c1c2b2c12883e963df442733460f3ba222ba0a7e0732d7936fcbbfd53d753d0773d81ddb23987215fb2ece67b0b95b1240f3c194b08b76440621cd0de98c1cbfcfbfba7c67e8ae4115c53081f8a3980de7d1bc97345d57e71292e6e54e14c33222e95332ca2da633e3a2322a7c6cff2f6226bacb571fcfa2770f2ba1073507f17a3d4b962b850e1682af71f6d8bd796ef4906e567336981eb40a0931abba92cf19fe5fb2afaa6d3df301a95f781b377660aaae22c14b1f975604ad361e57ad59f0a83f74cdf39210d43379d879af72a1b8ffbe50b6f124ef9e07884c8264f79a6fa1c9683f1e90cdf408d76ffe57c4cd51df317e0abde980925809fc64dcc8efa8205a0239d6a4a7adf119697bbd230c2d43a9632ea70bfc6c8ecf358c2551daaddda6c6f1b1a9595486731d5d6f850bf65860018a93382957ce3401e6b49b92d88666080a731e4c17b147de7b8998f32fcc7e431bb6ae60f45f8cd6136d3ee3c95e39b0075b08b0ca8c9215e77f4d8938acdbe435922434c37d5129eadbfff633f6868198b9cf824e6938ae13fe36cc87ab06e70a7f12c34acb963ba0b4ca4c97d185dfa4b369f2ea323d53318da02674d8257c5ee40d007173f4343a12843574293537fec653efc1fe366e7a7dd9d81e6c5576de886d53f2127cb8c27d96e56cba136e8a0f28b07ce670008511ec52c09e25288e0c8f01041381f9f81927f667a60d438992f4c5002d71d83550e936097360c5205eb40e2085e9ccdb63ad491be3e28ab4adc82e0acb06b5cfb421acb6ccea5b57f5580eda3aafc206922ffdd67cb6efe7baba1bc993c376a9f8679d60a2f6dfe9e1430620b347a21df9406ac5e28da6d7052a8da52b92d2d55f1f619dd3cc40f2defe788c7a61cf8b2476c16146780f7cb7a82f6391e511e335fe40ea059b470d0efdc5b40b67222a30ae068c42277edfb8b028888b5d9edf48b2a22e4468ca2d0c9a7c95d1177b77f4cfc31fd80aefa9f527f0b2b3ae60913941e66c3ee48c47ce78dafeed9f3da3826f540569f280fbdc9ef003740955664bdc9b85db0096a5221ddcba86181", 0x1000, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="7d106512040c4d2fb3a8212bd630a152f8f88a105d8ce9ea93a5ad9bd63802fe2bae9de38e82eb8c26f8841aa6e537c5e056638ca34997bd98d56359317992ac74e915e80352969e8c35c07b19aae19db5f71cd17eab1add13b5c73c390384362e80fbdbaa520a69e88e1073a2cb36f40f56dae7f45ac4de2f1870c74511ef83739bd4f349ace029c3842feff97bf3f10207d19c14802a2a4d0ffed97a3cbc67ed8c6c7500da5ba2b5b1586fbe9e2bbc33") r5 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x0, 0x7, 0x2, 0x4, 0x0, 0x4, 0x60000, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x12d3db56, 0x2}, 0x1800, 0x81, 0x7, 0x3, 0x40, 0x2, 0x4, 0x0, 0x3, 0x0, 0x6708fd02}, r4, 0x10, r1, 0x2) perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x2, 0x9, 0x19, 0x8, 0x0, 0x200, 0x8, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000015c0), 0x1}, 0x800, 0x7, 0x2, 0xcea3c900f618dbe5, 0xa19, 0x6, 0x7fff, 0x0, 0x7fff, 0x0, 0x101}, 0xffffffffffffffff, 0x8, r1, 0xa) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001880)={&(0x7f0000001680)="89ef2cce2b6a8d5d5d7b1d47bbad93663615e693e4e3de9664694d0e0be6f947782e65e8fc132966285860dcd87d9d84dcf606d5db02348b4ab93461619d5a413c97c9daeb94d20e2ddd0b681349054b16eb47c1d7b3f70488bae507b0c84e293c0b246ca72dcf0a8fa2d8efd7ff8dd75cbb84416772a6b4d3887eef2de43d53473562c72c2db761a85d3d77c469f69ac44e82", &(0x7f0000001740), &(0x7f0000001780)="9db86b6b2b4185cdb79b0c0eb1ed4825f0108b9347e23f941b0bc4db9f41eeed6860fee28b605821d58c169cc79060ce", &(0x7f00000017c0)="718332139d05e09c8df0efa9aab836756ad39672a369253ee90b086fa9dddd929db35212eec2fa801a959890de3f8f7595400ac8e157917b7c3c5ee59a0aecf64bf2dc68a34bd1f48e32ead35fb0d7f2974e2c0355e26dc51ae39fa39e814decc6eb23d1db41405d45cb3f323a88cd6c501bf558b79b9af645ccc7445b4aa233fd1b3955e2dfa04f21bc4f7e63cdcf5be902c79be5ad9f2d1fbf1dc1ff", 0x0, r3, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000018c0)) perf_event_open$cgroup(&(0x7f0000001940)={0x1, 0x80, 0x7, 0x20, 0x1, 0x9, 0x0, 0xfffffffffffffffd, 0x12, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x1, @perf_bp={&(0x7f0000001900), 0x4}, 0x180, 0x8, 0x7, 0x6, 0xcf2b, 0x9, 0x7f, 0x0, 0x2}, r2, 0x6, r1, 0x1) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a00)={r6, r5, 0x0, 0x1, &(0x7f00000019c0)='\x00'}, 0x30) gettid() r7 = openat$cgroup_ro(r2, &(0x7f0000001a40)='io.stat\x00', 0x0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@o_path={&(0x7f0000001a80)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001cc0)={r7, 0x58, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x40, '\x00', 0x0, r2, 0x3, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x1e, &(0x7f0000001b00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x97}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x0, 0x1, 0x9, 0x5, 0x80, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6796}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1000}, @cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000001c00)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001d40)={0x2, 0x9, 0x451b, 0xea4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e00)=[0x1, r3, r3, r7, r10, r3, r7], 0x0, 0x10, 0x9}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002440)={r7, 0xe0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000021c0)=[0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000002240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002280), &(0x7f00000022c0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000002300)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000027c0)={r7, 0xe0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f00000025c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002600), &(0x7f0000002640), 0x8, 0xda, 0x8, 0x8, &(0x7f0000002680)}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@bloom_filter={0x1e, 0x1e, 0x3, 0x405, 0x20, r2, 0x3, '\x00', r9, r2, 0x5, 0x4, 0x3, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002900)={{r8, 0xffffffffffffffff}, &(0x7f0000002880), &(0x7f00000028c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x1b, 0x22, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0xd, 0x7, 0x2, 0xffffffffffffffff, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7db}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0x7, 0x4, 0x7, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002040)='syzkaller\x00', 0x0, 0xe9, &(0x7f0000002080)=""/233, 0x41100, 0x29, '\x00', r11, 0x23, r2, 0x8, &(0x7f0000002480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0x8, 0x9, 0x174}, 0x10, r13, r2, 0x2, &(0x7f0000002940)=[r10, r8, r14, r2, r3, r15, r2, r10, r7], &(0x7f0000002980)=[{0x0, 0x2, 0x9, 0xb}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c40)={0x18, 0x11, &(0x7f0000002a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @ldst={0x0, 0x1, 0x3, 0x0, 0x9, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000002b40)='GPL\x00', 0xfb4, 0x1000, &(0x7f0000002b80)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003b80)={0x0, 0xb, 0x0, 0x3f}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000003bc0)=[{0x1, 0x1, 0x6, 0x6}, {0x5, 0x1, 0x5, 0xc}, {0x3, 0x4, 0x9, 0x8}, {0x4, 0x5, 0x4, 0x3}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x1}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003d80)={{r7, 0xffffffffffffffff}, &(0x7f0000003d00), &(0x7f0000003d40)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003fc0)={0x5, 0x1d, &(0x7f0000003dc0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x60000000}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @ldst={0x0, 0x3, 0x0, 0x6, 0x8, 0xfffffffffffffff0}, @call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000003ec0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x24, '\x00', r12, 0x1f, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003f00)={0x0, 0x10, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000003f40)=[r10, r8], &(0x7f0000003f80)=[{0x2, 0x2, 0x1}], 0x10, 0x4}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r17, 0x1, 0x32, &(0x7f00000040c0)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000004400)={0xc, 0x19, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f0000004200)='syzkaller\x00', 0x7, 0xdb, &(0x7f0000004240)=""/219, 0x100, 0x1f58fc16df675abe, '\x00', r11, 0x31, 0xffffffffffffffff, 0x8, &(0x7f0000004340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000004380)={0x3, 0x7, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000043c0)=[r7, r8, r15, r2], 0x0, 0x10, 0x10000}, 0x90) recvmsg$unix(r15, &(0x7f00000046c0)={&(0x7f00000044c0)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004540)=""/61, 0x3d}], 0x1, &(0x7f00000045c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x10000) 13:14:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 13:14:32 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x8, 0x89, 0x1, 0x0, 0x0, 0x8001, 0x14820, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x400, 0x4}, 0x400c, 0x8b, 0x0, 0x2, 0x100, 0x0, 0x834d, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="44bc872510559abd6c5dc9de7d189b25dd1d72bb99e0acbefc91112761098c64f3f45f1b448d2c37e5f16c12a39efcbb326deeea6fdc172f434bbb7ac90567090139a56c56c9142e0d97fb71b8426cdb009b241a64274c5efe436fd04f782e5b24a6220b46455245050021f7edb81c7df5c9098e37daa071e60a73ebb354b29b52b9b05bfeec78b2"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x1, 0x9, 0xfffffff8, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x5, 0xff, 0xf3, 0x9, 0x0, 0x7fe, 0x4b96e844e009db4d, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x60000, 0x4, @perf_bp={&(0x7f0000000540), 0x2}, 0x8000, 0x5, 0x7fffffff, 0x8, 0x8000000000000000, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x7, 0x5, 0x2, 0x0, 0x6, 0x20008, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x500, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x4, 0x6, 0x0, 0x400, 0x7f, 0x9, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xe, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r6, 0x8914, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3476.155753][T20624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3476.163670][T20624] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3476.171476][T20624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3476.179289][T20624] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3476.187108][T20624] 13:14:32 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x1b00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x700}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3476.254379][T20643] FAULT_INJECTION: forcing a failure. [ 3476.254379][T20643] name failslab, interval 1, probability 0, space 0, times 0 [ 3476.271237][T20643] CPU: 1 PID: 20643 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3476.281577][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3476.291556][T20643] Call Trace: [ 3476.294680][T20643] [ 3476.297462][T20643] dump_stack_lvl+0x151/0x1b7 [ 3476.301980][T20643] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3476.307462][T20643] ? avc_denied+0x1b0/0x1b0 [ 3476.313234][T20643] dump_stack+0x15/0x17 [ 3476.317237][T20643] should_fail+0x3c6/0x510 [ 3476.323582][T20643] __should_failslab+0xa4/0xe0 [ 3476.328329][T20643] ? vm_area_dup+0x26/0x230 [ 3476.332666][T20643] should_failslab+0x9/0x20 [ 3476.337007][T20643] slab_pre_alloc_hook+0x37/0xd0 [ 3476.341957][T20643] ? vm_area_dup+0x26/0x230 [ 3476.346295][T20643] kmem_cache_alloc+0x44/0x200 [ 3476.350904][T20643] vm_area_dup+0x26/0x230 [ 3476.355069][T20643] copy_mm+0x9a1/0x13e0 [ 3476.359054][T20643] ? copy_signal+0x610/0x610 [ 3476.363653][T20643] ? __init_rwsem+0xd6/0x1c0 [ 3476.368080][T20643] ? copy_signal+0x4e3/0x610 [ 3476.372504][T20643] copy_process+0x1149/0x3290 [ 3476.377043][T20643] ? proc_fail_nth_write+0x20b/0x290 [ 3476.382153][T20643] ? fsnotify_perm+0x6a/0x5d0 [ 3476.386654][T20643] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3476.391610][T20643] ? vfs_write+0x9ec/0x1110 [ 3476.395941][T20643] kernel_clone+0x21e/0x9e0 [ 3476.400280][T20643] ? file_end_write+0x1c0/0x1c0 [ 3476.404968][T20643] ? create_io_thread+0x1e0/0x1e0 [ 3476.409825][T20643] ? mutex_unlock+0xb2/0x260 [ 3476.414252][T20643] ? __mutex_lock_slowpath+0x10/0x10 [ 3476.419378][T20643] __x64_sys_clone+0x23f/0x290 [ 3476.424146][T20643] ? __do_sys_vfork+0x130/0x130 [ 3476.428837][T20643] ? ksys_write+0x260/0x2c0 [ 3476.433348][T20643] ? debug_smp_processor_id+0x17/0x20 [ 3476.438552][T20643] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3476.444453][T20643] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3476.449941][T20643] do_syscall_64+0x3d/0xb0 [ 3476.454177][T20643] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3476.459901][T20643] RIP: 0033:0x7ff3418cfda9 [ 3476.464251][T20643] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3476.483778][T20643] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3476.492191][T20643] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x2, 0x1, 0x2, 0x6, 0x8, 0xffffffffffffffe0, 0x1}, @map_fd={0x18, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xe5b6, 0x54, &(0x7f00000000c0)=""/84, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x2, 0x9, 0xa}], 0x10, 0x3}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='net_dev_start_xmit\x00', r0}, 0x10) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x9, 0x1e3308d3, 0x808, 0x1, 0x7, '\x00', 0x0, r2, 0x2, 0x2, 0x2}, 0x48) r4 = syz_clone(0x20000880, &(0x7f0000000480)="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", 0x1000, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="7d106512040c4d2fb3a8212bd630a152f8f88a105d8ce9ea93a5ad9bd63802fe2bae9de38e82eb8c26f8841aa6e537c5e056638ca34997bd98d56359317992ac74e915e80352969e8c35c07b19aae19db5f71cd17eab1add13b5c73c390384362e80fbdbaa520a69e88e1073a2cb36f40f56dae7f45ac4de2f1870c74511ef83739bd4f349ace029c3842feff97bf3f10207d19c14802a2a4d0ffed97a3cbc67ed8c6c7500da5ba2b5b1586fbe9e2bbc33") r5 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x0, 0x7, 0x2, 0x4, 0x0, 0x4, 0x60000, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x12d3db56, 0x2}, 0x1800, 0x81, 0x7, 0x3, 0x40, 0x2, 0x4, 0x0, 0x3, 0x0, 0x6708fd02}, r4, 0x10, r1, 0x2) (async) perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x2, 0x9, 0x19, 0x8, 0x0, 0x200, 0x8, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000015c0), 0x1}, 0x800, 0x7, 0x2, 0xcea3c900f618dbe5, 0xa19, 0x6, 0x7fff, 0x0, 0x7fff, 0x0, 0x101}, 0xffffffffffffffff, 0x8, r1, 0xa) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001880)={&(0x7f0000001680)="89ef2cce2b6a8d5d5d7b1d47bbad93663615e693e4e3de9664694d0e0be6f947782e65e8fc132966285860dcd87d9d84dcf606d5db02348b4ab93461619d5a413c97c9daeb94d20e2ddd0b681349054b16eb47c1d7b3f70488bae507b0c84e293c0b246ca72dcf0a8fa2d8efd7ff8dd75cbb84416772a6b4d3887eef2de43d53473562c72c2db761a85d3d77c469f69ac44e82", &(0x7f0000001740), &(0x7f0000001780)="9db86b6b2b4185cdb79b0c0eb1ed4825f0108b9347e23f941b0bc4db9f41eeed6860fee28b605821d58c169cc79060ce", &(0x7f00000017c0)="718332139d05e09c8df0efa9aab836756ad39672a369253ee90b086fa9dddd929db35212eec2fa801a959890de3f8f7595400ac8e157917b7c3c5ee59a0aecf64bf2dc68a34bd1f48e32ead35fb0d7f2974e2c0355e26dc51ae39fa39e814decc6eb23d1db41405d45cb3f323a88cd6c501bf558b79b9af645ccc7445b4aa233fd1b3955e2dfa04f21bc4f7e63cdcf5be902c79be5ad9f2d1fbf1dc1ff", 0x0, r3, 0x4}, 0x38) (async) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000018c0)) (async) perf_event_open$cgroup(&(0x7f0000001940)={0x1, 0x80, 0x7, 0x20, 0x1, 0x9, 0x0, 0xfffffffffffffffd, 0x12, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x1, @perf_bp={&(0x7f0000001900), 0x4}, 0x180, 0x8, 0x7, 0x6, 0xcf2b, 0x9, 0x7f, 0x0, 0x2}, r2, 0x6, r1, 0x1) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a00)={r6, r5, 0x0, 0x1, &(0x7f00000019c0)='\x00'}, 0x30) (async) gettid() (async) r7 = openat$cgroup_ro(r2, &(0x7f0000001a40)='io.stat\x00', 0x0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@o_path={&(0x7f0000001a80)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001cc0)={r7, 0x58, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x40, '\x00', 0x0, r2, 0x3, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x1e, &(0x7f0000001b00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x97}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x0, 0x1, 0x9, 0x5, 0x80, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6796}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1000}, @cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000001c00)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001d40)={0x2, 0x9, 0x451b, 0xea4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e00)=[0x1, r3, r3, r7, r10, r3, r7], 0x0, 0x10, 0x9}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002440)={r7, 0xe0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000021c0)=[0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000002240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002280), &(0x7f00000022c0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000002300)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000027c0)={r7, 0xe0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f00000025c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002600), &(0x7f0000002640), 0x8, 0xda, 0x8, 0x8, &(0x7f0000002680)}}, 0x10) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@bloom_filter={0x1e, 0x1e, 0x3, 0x405, 0x20, r2, 0x3, '\x00', r9, r2, 0x5, 0x4, 0x3, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002900)={{r8, 0xffffffffffffffff}, &(0x7f0000002880), &(0x7f00000028c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x1b, 0x22, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0xd, 0x7, 0x2, 0xffffffffffffffff, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7db}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0x7, 0x4, 0x7, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002040)='syzkaller\x00', 0x0, 0xe9, &(0x7f0000002080)=""/233, 0x41100, 0x29, '\x00', r11, 0x23, r2, 0x8, &(0x7f0000002480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0x8, 0x9, 0x174}, 0x10, r13, r2, 0x2, &(0x7f0000002940)=[r10, r8, r14, r2, r3, r15, r2, r10, r7], &(0x7f0000002980)=[{0x0, 0x2, 0x9, 0xb}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c40)={0x18, 0x11, &(0x7f0000002a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @ldst={0x0, 0x1, 0x3, 0x0, 0x9, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000002b40)='GPL\x00', 0xfb4, 0x1000, &(0x7f0000002b80)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003b80)={0x0, 0xb, 0x0, 0x3f}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000003bc0)=[{0x1, 0x1, 0x6, 0x6}, {0x5, 0x1, 0x5, 0xc}, {0x3, 0x4, 0x9, 0x8}, {0x4, 0x5, 0x4, 0x3}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x1}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003d80)={{r7, 0xffffffffffffffff}, &(0x7f0000003d00), &(0x7f0000003d40)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003fc0)={0x5, 0x1d, &(0x7f0000003dc0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x60000000}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @ldst={0x0, 0x3, 0x0, 0x6, 0x8, 0xfffffffffffffff0}, @call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000003ec0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x24, '\x00', r12, 0x1f, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003f00)={0x0, 0x10, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000003f40)=[r10, r8], &(0x7f0000003f80)=[{0x2, 0x2, 0x1}], 0x10, 0x4}, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r17, 0x1, 0x32, &(0x7f00000040c0)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000004400)={0xc, 0x19, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f0000004200)='syzkaller\x00', 0x7, 0xdb, &(0x7f0000004240)=""/219, 0x100, 0x1f58fc16df675abe, '\x00', r11, 0x31, 0xffffffffffffffff, 0x8, &(0x7f0000004340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000004380)={0x3, 0x7, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000043c0)=[r7, r8, r15, r2], 0x0, 0x10, 0x10000}, 0x90) (async) recvmsg$unix(r15, &(0x7f00000046c0)={&(0x7f00000044c0)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004540)=""/61, 0x3d}], 0x1, &(0x7f00000045c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x10000) 13:14:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x2, 0x1, 0x2, 0x6, 0x8, 0xffffffffffffffe0, 0x1}, @map_fd={0x18, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xe5b6, 0x54, &(0x7f00000000c0)=""/84, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x2, 0x9, 0xa}], 0x10, 0x3}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='net_dev_start_xmit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x9, 0x1e3308d3, 0x808, 0x1, 0x7, '\x00', 0x0, r2, 0x2, 0x2, 0x2}, 0x48) (async) r4 = syz_clone(0x20000880, &(0x7f0000000480)="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", 0x1000, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="7d106512040c4d2fb3a8212bd630a152f8f88a105d8ce9ea93a5ad9bd63802fe2bae9de38e82eb8c26f8841aa6e537c5e056638ca34997bd98d56359317992ac74e915e80352969e8c35c07b19aae19db5f71cd17eab1add13b5c73c390384362e80fbdbaa520a69e88e1073a2cb36f40f56dae7f45ac4de2f1870c74511ef83739bd4f349ace029c3842feff97bf3f10207d19c14802a2a4d0ffed97a3cbc67ed8c6c7500da5ba2b5b1586fbe9e2bbc33") r5 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x0, 0x7, 0x2, 0x4, 0x0, 0x4, 0x60000, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x12d3db56, 0x2}, 0x1800, 0x81, 0x7, 0x3, 0x40, 0x2, 0x4, 0x0, 0x3, 0x0, 0x6708fd02}, r4, 0x10, r1, 0x2) perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x2, 0x9, 0x19, 0x8, 0x0, 0x200, 0x8, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000015c0), 0x1}, 0x800, 0x7, 0x2, 0xcea3c900f618dbe5, 0xa19, 0x6, 0x7fff, 0x0, 0x7fff, 0x0, 0x101}, 0xffffffffffffffff, 0x8, r1, 0xa) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001880)={&(0x7f0000001680)="89ef2cce2b6a8d5d5d7b1d47bbad93663615e693e4e3de9664694d0e0be6f947782e65e8fc132966285860dcd87d9d84dcf606d5db02348b4ab93461619d5a413c97c9daeb94d20e2ddd0b681349054b16eb47c1d7b3f70488bae507b0c84e293c0b246ca72dcf0a8fa2d8efd7ff8dd75cbb84416772a6b4d3887eef2de43d53473562c72c2db761a85d3d77c469f69ac44e82", &(0x7f0000001740), &(0x7f0000001780)="9db86b6b2b4185cdb79b0c0eb1ed4825f0108b9347e23f941b0bc4db9f41eeed6860fee28b605821d58c169cc79060ce", &(0x7f00000017c0)="718332139d05e09c8df0efa9aab836756ad39672a369253ee90b086fa9dddd929db35212eec2fa801a959890de3f8f7595400ac8e157917b7c3c5ee59a0aecf64bf2dc68a34bd1f48e32ead35fb0d7f2974e2c0355e26dc51ae39fa39e814decc6eb23d1db41405d45cb3f323a88cd6c501bf558b79b9af645ccc7445b4aa233fd1b3955e2dfa04f21bc4f7e63cdcf5be902c79be5ad9f2d1fbf1dc1ff", 0x0, r3, 0x4}, 0x38) (async) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000018c0)) (async) perf_event_open$cgroup(&(0x7f0000001940)={0x1, 0x80, 0x7, 0x20, 0x1, 0x9, 0x0, 0xfffffffffffffffd, 0x12, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x1, @perf_bp={&(0x7f0000001900), 0x4}, 0x180, 0x8, 0x7, 0x6, 0xcf2b, 0x9, 0x7f, 0x0, 0x2}, r2, 0x6, r1, 0x1) (async) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a00)={r6, r5, 0x0, 0x1, &(0x7f00000019c0)='\x00'}, 0x30) gettid() (async) r7 = openat$cgroup_ro(r2, &(0x7f0000001a40)='io.stat\x00', 0x0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@o_path={&(0x7f0000001a80)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001cc0)={r7, 0x58, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x40, '\x00', 0x0, r2, 0x3, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x1e, &(0x7f0000001b00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x97}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x0, 0x1, 0x9, 0x5, 0x80, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6796}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1000}, @cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000001c00)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001d40)={0x2, 0x9, 0x451b, 0xea4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e00)=[0x1, r3, r3, r7, r10, r3, r7], 0x0, 0x10, 0x9}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002440)={r7, 0xe0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000021c0)=[0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000002240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002280), &(0x7f00000022c0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000002300)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000027c0)={r7, 0xe0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f00000025c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002600), &(0x7f0000002640), 0x8, 0xda, 0x8, 0x8, &(0x7f0000002680)}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@bloom_filter={0x1e, 0x1e, 0x3, 0x405, 0x20, r2, 0x3, '\x00', r9, r2, 0x5, 0x4, 0x3, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002900)={{r8, 0xffffffffffffffff}, &(0x7f0000002880), &(0x7f00000028c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x1b, 0x22, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0xd, 0x7, 0x2, 0xffffffffffffffff, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7db}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0x7, 0x4, 0x7, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002040)='syzkaller\x00', 0x0, 0xe9, &(0x7f0000002080)=""/233, 0x41100, 0x29, '\x00', r11, 0x23, r2, 0x8, &(0x7f0000002480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0x8, 0x9, 0x174}, 0x10, r13, r2, 0x2, &(0x7f0000002940)=[r10, r8, r14, r2, r3, r15, r2, r10, r7], &(0x7f0000002980)=[{0x0, 0x2, 0x9, 0xb}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c40)={0x18, 0x11, &(0x7f0000002a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @ldst={0x0, 0x1, 0x3, 0x0, 0x9, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000002b40)='GPL\x00', 0xfb4, 0x1000, &(0x7f0000002b80)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003b80)={0x0, 0xb, 0x0, 0x3f}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000003bc0)=[{0x1, 0x1, 0x6, 0x6}, {0x5, 0x1, 0x5, 0xc}, {0x3, 0x4, 0x9, 0x8}, {0x4, 0x5, 0x4, 0x3}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x1}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003d80)={{r7, 0xffffffffffffffff}, &(0x7f0000003d00), &(0x7f0000003d40)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003fc0)={0x5, 0x1d, &(0x7f0000003dc0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x60000000}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @ldst={0x0, 0x3, 0x0, 0x6, 0x8, 0xfffffffffffffff0}, @call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000003ec0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x24, '\x00', r12, 0x1f, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003f00)={0x0, 0x10, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000003f40)=[r10, r8], &(0x7f0000003f80)=[{0x2, 0x2, 0x1}], 0x10, 0x4}, 0x90) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_attach_bpf(r17, 0x1, 0x32, &(0x7f00000040c0)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000004400)={0xc, 0x19, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f0000004200)='syzkaller\x00', 0x7, 0xdb, &(0x7f0000004240)=""/219, 0x100, 0x1f58fc16df675abe, '\x00', r11, 0x31, 0xffffffffffffffff, 0x8, &(0x7f0000004340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000004380)={0x3, 0x7, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000043c0)=[r7, r8, r15, r2], 0x0, 0x10, 0x10000}, 0x90) (async) recvmsg$unix(r15, &(0x7f00000046c0)={&(0x7f00000044c0)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004540)=""/61, 0x3d}], 0x1, &(0x7f00000045c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x10000) 13:14:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x900}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 13:14:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3476.500108][T20643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3476.507908][T20643] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3476.515797][T20643] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3476.523609][T20643] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3476.531435][T20643] 13:14:32 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0xa, 0x1}, 0x10}, 0x90) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x12, 0x1, 0x7, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup=r9, 0xffffffffffffffff, 0x5, 0x8, r8, @link_fd, r10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x1d, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000004c0), &(0x7f0000000700), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', r7, 0x1a, r9, 0x8, &(0x7f0000000080)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r0, 0x6, 0x0, &(0x7f00000008c0)=[{0x2, 0x1, 0x4, 0x6}, {0x5, 0x1, 0x4, 0x1}, {0x1, 0x4, 0xd, 0x2}, {0x0, 0x5, 0xc, 0x8}, {0x3, 0x1, 0x6, 0x6}, {0x2, 0x3, 0x6, 0x8}], 0x10, 0x9}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r3}, &(0x7f0000000c40), &(0x7f0000001100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) 13:14:32 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x1c00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3476.585518][T20640] device team0 entered promiscuous mode [ 3476.620168][T20668] FAULT_INJECTION: forcing a failure. [ 3476.620168][T20668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3476.633555][T20668] CPU: 1 PID: 20668 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3476.643833][T20668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3476.653729][T20668] Call Trace: [ 3476.656844][T20668] [ 3476.659880][T20668] dump_stack_lvl+0x151/0x1b7 [ 3476.664392][T20668] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3476.669861][T20668] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 3476.675341][T20668] dump_stack+0x15/0x17 [ 3476.679322][T20668] should_fail+0x3c6/0x510 [ 3476.683605][T20668] should_fail_alloc_page+0x5a/0x80 [ 3476.688634][T20668] prepare_alloc_pages+0x15c/0x700 [ 3476.693670][T20668] ? __alloc_pages_bulk+0xe40/0xe40 [ 3476.698694][T20668] ? native_set_ldt+0x360/0x360 [ 3476.703382][T20668] __alloc_pages+0x18c/0x8f0 [ 3476.707805][T20668] ? _raw_spin_unlock+0x4d/0x70 [ 3476.712853][T20668] ? prep_new_page+0x110/0x110 [ 3476.717445][T20668] pte_alloc_one+0x73/0x1b0 [ 3476.721784][T20668] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3476.726822][T20668] ? preempt_schedule+0xd9/0xe0 [ 3476.731507][T20668] ? preempt_schedule_common+0xbe/0xf0 [ 3476.736804][T20668] __pte_alloc+0x86/0x350 [ 3476.740967][T20668] ? free_pgtables+0x280/0x280 [ 3476.745559][T20668] ? _raw_spin_lock+0xa4/0x1b0 [ 3476.750159][T20668] ? __kasan_check_write+0x14/0x20 [ 3476.755107][T20668] copy_page_range+0x28a8/0x2f90 [ 3476.759881][T20668] ? __kasan_slab_alloc+0xb1/0xe0 [ 3476.764748][T20668] ? pfn_valid+0x1e0/0x1e0 [ 3476.768993][T20668] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3476.774548][T20668] ? __rb_insert_augmented+0x5de/0x610 [ 3476.779844][T20668] copy_mm+0xc7e/0x13e0 [ 3476.783837][T20668] ? copy_signal+0x610/0x610 [ 3476.788259][T20668] ? __init_rwsem+0xd6/0x1c0 [ 3476.792776][T20668] ? copy_signal+0x4e3/0x610 [ 3476.797208][T20668] copy_process+0x1149/0x3290 [ 3476.801976][T20668] ? proc_fail_nth_write+0x20b/0x290 [ 3476.807646][T20668] ? fsnotify_perm+0x6a/0x5d0 [ 3476.812301][T20668] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3476.817232][T20668] ? vfs_write+0x9ec/0x1110 [ 3476.821563][T20668] kernel_clone+0x21e/0x9e0 [ 3476.825900][T20668] ? file_end_write+0x1c0/0x1c0 [ 3476.830586][T20668] ? create_io_thread+0x1e0/0x1e0 [ 3476.835444][T20668] ? mutex_unlock+0xb2/0x260 [ 3476.839885][T20668] ? __mutex_lock_slowpath+0x10/0x10 [ 3476.845020][T20668] __x64_sys_clone+0x23f/0x290 [ 3476.849601][T20668] ? __do_sys_vfork+0x130/0x130 [ 3476.854297][T20668] ? ksys_write+0x260/0x2c0 [ 3476.858622][T20668] ? debug_smp_processor_id+0x17/0x20 [ 3476.864005][T20668] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3476.869911][T20668] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3476.875458][T20668] do_syscall_64+0x3d/0xb0 [ 3476.879719][T20668] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3476.886130][T20668] RIP: 0033:0x7ff3418cfda9 [ 3476.890394][T20668] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3476.909825][T20668] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3476.918076][T20668] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3476.925888][T20668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:33 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xb01}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:33 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:33 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x8, 0x89, 0x1, 0x0, 0x0, 0x8001, 0x14820, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x400, 0x4}, 0x400c, 0x8b, 0x0, 0x2, 0x100, 0x0, 0x834d, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0xa) (async) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="44bc872510559abd6c5dc9de7d189b25dd1d72bb99e0acbefc91112761098c64f3f45f1b448d2c37e5f16c12a39efcbb326deeea6fdc172f434bbb7ac90567090139a56c56c9142e0d97fb71b8426cdb009b241a64274c5efe436fd04f782e5b24a6220b46455245050021f7edb81c7df5c9098e37daa071e60a73ebb354b29b52b9b05bfeec78b2"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x1, 0x9, 0xfffffff8, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x5, 0xff, 0xf3, 0x9, 0x0, 0x7fe, 0x4b96e844e009db4d, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x60000, 0x4, @perf_bp={&(0x7f0000000540), 0x2}, 0x8000, 0x5, 0x7fffffff, 0x8, 0x8000000000000000, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x7, 0x5, 0x2, 0x0, 0x6, 0x20008, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x500, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x4, 0x6, 0x0, 0x400, 0x7f, 0x9, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xe, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r6, 0x8914, 0x20000000) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3476.933727][T20668] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3476.941526][T20668] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3476.949322][T20668] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3476.957140][T20668] 13:14:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 13:14:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0xa, 0x1}, 0x10}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0xa, 0x1}, 0x10}, 0x90) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x12, 0x1, 0x7, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x12, 0x1, 0x7, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup=r9, 0xffffffffffffffff, 0x5, 0x8, r8, @link_fd, r10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x1d, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000004c0), &(0x7f0000000700), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', r7, 0x1a, r9, 0x8, &(0x7f0000000080)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r0, 0x6, 0x0, &(0x7f00000008c0)=[{0x2, 0x1, 0x4, 0x6}, {0x5, 0x1, 0x4, 0x1}, {0x1, 0x4, 0xd, 0x2}, {0x0, 0x5, 0xc, 0x8}, {0x3, 0x1, 0x6, 0x6}, {0x2, 0x3, 0x6, 0x8}], 0x10, 0x9}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r3}, &(0x7f0000000c40), &(0x7f0000001100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) 13:14:33 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xc00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:33 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3477.010351][T20679] FAULT_INJECTION: forcing a failure. [ 3477.010351][T20679] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.036629][T20679] CPU: 0 PID: 20679 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3477.047063][T20679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3477.057042][T20679] Call Trace: [ 3477.060175][T20679] [ 3477.062943][T20679] dump_stack_lvl+0x151/0x1b7 [ 3477.067453][T20679] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3477.073009][T20679] dump_stack+0x15/0x17 [ 3477.077268][T20679] should_fail+0x3c6/0x510 [ 3477.081528][T20679] __should_failslab+0xa4/0xe0 [ 3477.086535][T20679] ? anon_vma_fork+0xf7/0x4e0 [ 3477.091813][T20679] should_failslab+0x9/0x20 [ 3477.096214][T20679] slab_pre_alloc_hook+0x37/0xd0 [ 3477.102584][T20679] ? anon_vma_fork+0xf7/0x4e0 [ 3477.107087][T20679] kmem_cache_alloc+0x44/0x200 [ 3477.111755][T20679] anon_vma_fork+0xf7/0x4e0 [ 3477.116100][T20679] ? anon_vma_name+0x4c/0x70 [ 3477.120795][T20679] ? vm_area_dup+0x17a/0x230 [ 3477.125231][T20679] copy_mm+0xa3a/0x13e0 [ 3477.129214][T20679] ? copy_signal+0x610/0x610 [ 3477.133629][T20679] ? __init_rwsem+0xd6/0x1c0 [ 3477.138075][T20679] ? copy_signal+0x4e3/0x610 [ 3477.142490][T20679] copy_process+0x1149/0x3290 [ 3477.147003][T20679] ? proc_fail_nth_write+0x20b/0x290 [ 3477.152127][T20679] ? fsnotify_perm+0x6a/0x5d0 [ 3477.156888][T20679] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3477.162111][T20679] ? vfs_write+0x9ec/0x1110 [ 3477.166492][T20679] kernel_clone+0x21e/0x9e0 [ 3477.170870][T20679] ? file_end_write+0x1c0/0x1c0 [ 3477.175548][T20679] ? create_io_thread+0x1e0/0x1e0 [ 3477.180515][T20679] ? mutex_unlock+0xb2/0x260 [ 3477.185071][T20679] ? __mutex_lock_slowpath+0x10/0x10 [ 3477.190136][T20679] __x64_sys_clone+0x23f/0x290 [ 3477.194908][T20679] ? __do_sys_vfork+0x130/0x130 [ 3477.199587][T20679] ? ksys_write+0x260/0x2c0 [ 3477.203932][T20679] ? debug_smp_processor_id+0x17/0x20 [ 3477.209713][T20679] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3477.215683][T20679] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3477.221149][T20679] do_syscall_64+0x3d/0xb0 [ 3477.225412][T20679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3477.231264][T20679] RIP: 0033:0x7ff3418cfda9 [ 3477.235515][T20679] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 13:14:33 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xd00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 13:14:33 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0xa, 0x1}, 0x10}, 0x90) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x12, 0x1, 0x7, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup=r9, 0xffffffffffffffff, 0x5, 0x8, r8, @link_fd, r10}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x1d, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000004c0), &(0x7f0000000700), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', r7, 0x1a, r9, 0x8, &(0x7f0000000080)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r0, 0x6, 0x0, &(0x7f00000008c0)=[{0x2, 0x1, 0x4, 0x6}, {0x5, 0x1, 0x4, 0x1}, {0x1, 0x4, 0xd, 0x2}, {0x0, 0x5, 0xc, 0x8}, {0x3, 0x1, 0x6, 0x6}, {0x2, 0x3, 0x6, 0x8}], 0x10, 0x9}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r3}, &(0x7f0000000c40), &(0x7f0000001100)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) 13:14:33 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3477.255050][T20679] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3477.263368][T20679] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3477.271186][T20679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3477.278988][T20679] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3477.287334][T20679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3477.295264][T20679] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3477.303140][T20679] 13:14:33 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xf00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3477.349188][T20693] FAULT_INJECTION: forcing a failure. [ 3477.349188][T20693] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.381969][T20693] CPU: 1 PID: 20693 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3477.392162][T20693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3477.395450][T20677] device team0 entered promiscuous mode [ 3477.402152][T20693] Call Trace: [ 3477.402163][T20693] [ 3477.402171][T20693] dump_stack_lvl+0x151/0x1b7 [ 3477.402200][T20693] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3477.402223][T20693] dump_stack+0x15/0x17 [ 3477.427494][T20693] should_fail+0x3c6/0x510 [ 3477.432005][T20693] __should_failslab+0xa4/0xe0 [ 3477.436591][T20693] ? anon_vma_fork+0x1df/0x4e0 [ 3477.441423][T20693] should_failslab+0x9/0x20 [ 3477.445746][T20693] slab_pre_alloc_hook+0x37/0xd0 [ 3477.450643][T20693] ? anon_vma_fork+0x1df/0x4e0 [ 3477.455246][T20693] kmem_cache_alloc+0x44/0x200 [ 3477.459824][T20693] anon_vma_fork+0x1df/0x4e0 [ 3477.464723][T20693] copy_mm+0xa3a/0x13e0 [ 3477.468721][T20693] ? copy_signal+0x610/0x610 [ 3477.473126][T20693] ? __init_rwsem+0xd6/0x1c0 [ 3477.477895][T20693] ? copy_signal+0x4e3/0x610 [ 3477.482334][T20693] copy_process+0x1149/0x3290 [ 3477.486926][T20693] ? proc_fail_nth_write+0x20b/0x290 [ 3477.492046][T20693] ? fsnotify_perm+0x6a/0x5d0 [ 3477.496558][T20693] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3477.501602][T20693] ? vfs_write+0x9ec/0x1110 [ 3477.506022][T20693] kernel_clone+0x21e/0x9e0 [ 3477.510454][T20693] ? file_end_write+0x1c0/0x1c0 [ 3477.515133][T20693] ? create_io_thread+0x1e0/0x1e0 [ 3477.519991][T20693] ? mutex_unlock+0xb2/0x260 [ 3477.524677][T20693] ? __mutex_lock_slowpath+0x10/0x10 [ 3477.530433][T20693] __x64_sys_clone+0x23f/0x290 [ 3477.535004][T20693] ? __do_sys_vfork+0x130/0x130 [ 3477.539688][T20693] ? ksys_write+0x260/0x2c0 [ 3477.544190][T20693] ? debug_smp_processor_id+0x17/0x20 [ 3477.549393][T20693] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3477.555724][T20693] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3477.561197][T20693] do_syscall_64+0x3d/0xb0 [ 3477.565447][T20693] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3477.571271][T20693] RIP: 0033:0x7ff3418cfda9 [ 3477.575521][T20693] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 13:14:33 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000711223000000f36dbce31a133f4b0000"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 13:14:34 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3801}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) [ 3477.595100][T20693] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3477.604029][T20693] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3477.611840][T20693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3477.619760][T20693] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3477.627763][T20693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3477.635568][T20693] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3477.643729][T20693] [ 3477.675576][T20713] FAULT_INJECTION: forcing a failure. [ 3477.675576][T20713] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.688915][T20713] CPU: 1 PID: 20713 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3477.699073][T20713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3477.708987][T20713] Call Trace: [ 3477.712180][T20713] [ 3477.715072][T20713] dump_stack_lvl+0x151/0x1b7 [ 3477.719572][T20713] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3477.725035][T20713] dump_stack+0x15/0x17 [ 3477.729022][T20713] should_fail+0x3c6/0x510 [ 3477.733372][T20713] __should_failslab+0xa4/0xe0 [ 3477.737968][T20713] ? anon_vma_fork+0x1df/0x4e0 [ 3477.742562][T20713] should_failslab+0x9/0x20 [ 3477.746906][T20713] slab_pre_alloc_hook+0x37/0xd0 [ 3477.751680][T20713] ? anon_vma_fork+0x1df/0x4e0 [ 3477.756281][T20713] kmem_cache_alloc+0x44/0x200 [ 3477.760898][T20713] anon_vma_fork+0x1df/0x4e0 [ 3477.765312][T20713] copy_mm+0xa3a/0x13e0 [ 3477.769304][T20713] ? copy_signal+0x610/0x610 [ 3477.773733][T20713] ? __init_rwsem+0xd6/0x1c0 [ 3477.778151][T20713] ? copy_signal+0x4e3/0x610 [ 3477.782575][T20713] copy_process+0x1149/0x3290 [ 3477.787100][T20713] ? proc_fail_nth_write+0x20b/0x290 [ 3477.792306][T20713] ? fsnotify_perm+0x6a/0x5d0 [ 3477.796810][T20713] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3477.801753][T20713] ? vfs_write+0x9ec/0x1110 [ 3477.806277][T20713] kernel_clone+0x21e/0x9e0 [ 3477.810617][T20713] ? file_end_write+0x1c0/0x1c0 [ 3477.815737][T20713] ? create_io_thread+0x1e0/0x1e0 [ 3477.820600][T20713] ? mutex_unlock+0xb2/0x260 [ 3477.825207][T20713] ? __mutex_lock_slowpath+0x10/0x10 [ 3477.830320][T20713] __x64_sys_clone+0x23f/0x290 [ 3477.834927][T20713] ? __do_sys_vfork+0x130/0x130 [ 3477.839692][T20713] ? ksys_write+0x260/0x2c0 [ 3477.844034][T20713] ? debug_smp_processor_id+0x17/0x20 [ 3477.849246][T20713] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3477.855142][T20713] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3477.860615][T20713] do_syscall_64+0x3d/0xb0 [ 3477.864881][T20713] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3477.870592][T20713] RIP: 0033:0x7ff3418cfda9 [ 3477.874854][T20713] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3477.895853][T20713] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3477.904094][T20713] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3477.912162][T20713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000711223000000f36dbce31a133f4b0000"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000711223000000f36dbce31a133f4b0000"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) 13:14:34 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1400}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3f00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 13:14:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000711223000000f36dbce31a133f4b0000"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) [ 3477.919973][T20713] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3477.927972][T20713] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3477.935905][T20713] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3477.943720][T20713] 13:14:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00dd3acf000095e7e80ce9d46b003964a018600eed58b10580fa50bfe339471d90dcdd201830c06aa89b5e3f5870febb1c83563d3cd0202b1183616481e3347fd501"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='mem_connect\x00', r4}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0xae, 0x2, 0x2, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x100800, 0xfffffffffffffbff, 0x8, 0x5, 0x3, 0x401, 0xe000, 0x0, 0x3c, 0x0, 0x5}, r5, 0x6, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x40, 0x7, 0x4, 0x1, 0x0, 0x0, 0x2218, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x10400, 0x10000, 0x0, 0x9, 0x1, 0x8, 0x8, 0x0, 0x7f, 0x0, 0x7}, r5, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x5}, [@generic={0x7f, 0x7, 0x3, 0x1, 0xffff}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xb8c}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x55, &(0x7f0000000440)=""/85, 0x41100, 0x1, '\x00', 0x0, 0x9, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r7, r1}, 0xc) [ 3477.982751][T20721] FAULT_INJECTION: forcing a failure. [ 3477.982751][T20721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3477.995996][T20721] CPU: 0 PID: 20721 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3478.006040][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3478.015934][T20721] Call Trace: [ 3478.019752][T20721] [ 3478.022530][T20721] dump_stack_lvl+0x151/0x1b7 [ 3478.027402][T20721] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3478.032858][T20721] dump_stack+0x15/0x17 [ 3478.036856][T20721] should_fail+0x3c6/0x510 [ 3478.041109][T20721] should_fail_alloc_page+0x5a/0x80 [ 3478.046318][T20721] prepare_alloc_pages+0x15c/0x700 [ 3478.051271][T20721] ? __alloc_pages_bulk+0xe40/0xe40 [ 3478.056390][T20721] __alloc_pages+0x18c/0x8f0 [ 3478.060814][T20721] ? prep_new_page+0x110/0x110 [ 3478.065416][T20721] ? __alloc_pages+0x27e/0x8f0 [ 3478.070018][T20721] ? __kasan_check_write+0x14/0x20 [ 3478.074969][T20721] ? _raw_spin_lock+0xa4/0x1b0 [ 3478.079559][T20721] __pmd_alloc+0xb1/0x550 [ 3478.083727][T20721] ? __pud_alloc+0x260/0x260 [ 3478.088150][T20721] ? __pud_alloc+0x213/0x260 [ 3478.092577][T20721] ? do_handle_mm_fault+0x2330/0x2330 [ 3478.098145][T20721] ? __stack_depot_save+0x34/0x470 [ 3478.103143][T20721] ? anon_vma_clone+0x9a/0x500 [ 3478.107864][T20721] copy_page_range+0x2b3d/0x2f90 [ 3478.112721][T20721] ? __kasan_slab_alloc+0xb1/0xe0 [ 3478.117574][T20721] ? slab_post_alloc_hook+0x53/0x2c0 [ 3478.122703][T20721] ? copy_mm+0xa3a/0x13e0 [ 3478.126860][T20721] ? copy_process+0x1149/0x3290 [ 3478.131545][T20721] ? kernel_clone+0x21e/0x9e0 [ 3478.136059][T20721] ? do_syscall_64+0x3d/0xb0 [ 3478.140501][T20721] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3478.146408][T20721] ? pfn_valid+0x1e0/0x1e0 [ 3478.150649][T20721] ? rwsem_write_trylock+0x15b/0x290 [ 3478.155779][T20721] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 3478.162013][T20721] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3478.167567][T20721] ? __rb_insert_augmented+0x5de/0x610 [ 3478.172862][T20721] copy_mm+0xc7e/0x13e0 [ 3478.176854][T20721] ? copy_signal+0x610/0x610 [ 3478.181276][T20721] ? __init_rwsem+0xd6/0x1c0 [ 3478.185704][T20721] ? copy_signal+0x4e3/0x610 [ 3478.190135][T20721] copy_process+0x1149/0x3290 [ 3478.194906][T20721] ? proc_fail_nth_write+0x20b/0x290 [ 3478.200025][T20721] ? fsnotify_perm+0x6a/0x5d0 [ 3478.204537][T20721] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3478.210042][T20721] ? vfs_write+0x9ec/0x1110 [ 3478.214385][T20721] kernel_clone+0x21e/0x9e0 [ 3478.218753][T20721] ? file_end_write+0x1c0/0x1c0 [ 3478.223592][T20721] ? create_io_thread+0x1e0/0x1e0 [ 3478.228438][T20721] ? mutex_unlock+0xb2/0x260 [ 3478.232864][T20721] ? __mutex_lock_slowpath+0x10/0x10 [ 3478.237987][T20721] __x64_sys_clone+0x23f/0x290 [ 3478.242584][T20721] ? __do_sys_vfork+0x130/0x130 [ 3478.247270][T20721] ? ksys_write+0x260/0x2c0 [ 3478.251624][T20721] ? debug_smp_processor_id+0x17/0x20 [ 3478.256817][T20721] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3478.262722][T20721] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3478.268191][T20721] do_syscall_64+0x3d/0xb0 [ 3478.272441][T20721] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3478.278184][T20721] RIP: 0033:0x7ff3418cfda9 [ 3478.282434][T20721] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3478.301875][T20721] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3478.310205][T20721] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3478.318100][T20721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3478.325909][T20721] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 13:14:34 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x8, 0x89, 0x1, 0x0, 0x0, 0x8001, 0x14820, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x400, 0x4}, 0x400c, 0x8b, 0x0, 0x2, 0x100, 0x0, 0x834d, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="44bc872510559abd6c5dc9de7d189b25dd1d72bb99e0acbefc91112761098c64f3f45f1b448d2c37e5f16c12a39efcbb326deeea6fdc172f434bbb7ac90567090139a56c56c9142e0d97fb71b8426cdb009b241a64274c5efe436fd04f782e5b24a6220b46455245050021f7edb81c7df5c9098e37daa071e60a73ebb354b29b52b9b05bfeec78b2"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x1, 0x9, 0xfffffff8, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x5, 0xff, 0xf3, 0x9, 0x0, 0x7fe, 0x4b96e844e009db4d, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x60000, 0x4, @perf_bp={&(0x7f0000000540), 0x2}, 0x8000, 0x5, 0x7fffffff, 0x8, 0x8000000000000000, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x7, 0x5, 0x2, 0x0, 0x6, 0x20008, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x500, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x4, 0x6, 0x0, 0x400, 0x7f, 0x9, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xe, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r6, 0x8914, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:34 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1801}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3478.333730][T20721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3478.341539][T20721] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3478.349356][T20721] 13:14:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 13:14:34 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x4000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1900}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x4100}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:34 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1b00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3478.469790][T20733] device team0 entered promiscuous mode [ 3478.505260][T20741] FAULT_INJECTION: forcing a failure. [ 3478.505260][T20741] name failslab, interval 1, probability 0, space 0, times 0 13:14:34 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1c00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3478.518756][T20741] CPU: 0 PID: 20741 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3478.529953][T20741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3478.539833][T20741] Call Trace: [ 3478.542953][T20741] [ 3478.545735][T20741] dump_stack_lvl+0x151/0x1b7 [ 3478.550256][T20741] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3478.555728][T20741] dump_stack+0x15/0x17 [ 3478.559795][T20741] should_fail+0x3c6/0x510 [ 3478.564050][T20741] __should_failslab+0xa4/0xe0 13:14:34 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x2000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3478.568647][T20741] ? vm_area_dup+0x26/0x230 [ 3478.572989][T20741] should_failslab+0x9/0x20 [ 3478.577326][T20741] slab_pre_alloc_hook+0x37/0xd0 [ 3478.582229][T20741] ? vm_area_dup+0x26/0x230 [ 3478.586569][T20741] kmem_cache_alloc+0x44/0x200 [ 3478.591174][T20741] vm_area_dup+0x26/0x230 [ 3478.595508][T20741] copy_mm+0x9a1/0x13e0 [ 3478.599525][T20741] ? copy_signal+0x610/0x610 [ 3478.603932][T20741] ? __init_rwsem+0xd6/0x1c0 [ 3478.608352][T20741] ? copy_signal+0x4e3/0x610 [ 3478.612779][T20741] copy_process+0x1149/0x3290 13:14:35 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x2800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:35 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3478.617295][T20741] ? proc_fail_nth_write+0x20b/0x290 [ 3478.622413][T20741] ? fsnotify_perm+0x6a/0x5d0 [ 3478.627014][T20741] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3478.632310][T20741] ? vfs_write+0x9ec/0x1110 [ 3478.636651][T20741] kernel_clone+0x21e/0x9e0 [ 3478.641094][T20741] ? file_end_write+0x1c0/0x1c0 [ 3478.645788][T20741] ? create_io_thread+0x1e0/0x1e0 [ 3478.650748][T20741] ? mutex_unlock+0xb2/0x260 [ 3478.655171][T20741] ? __mutex_lock_slowpath+0x10/0x10 [ 3478.660474][T20741] __x64_sys_clone+0x23f/0x290 [ 3478.665075][T20741] ? __do_sys_vfork+0x130/0x130 [ 3478.669758][T20741] ? ksys_write+0x260/0x2c0 [ 3478.674096][T20741] ? debug_smp_processor_id+0x17/0x20 [ 3478.679309][T20741] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3478.685291][T20741] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3478.690760][T20741] do_syscall_64+0x3d/0xb0 [ 3478.695009][T20741] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3478.700823][T20741] RIP: 0033:0x7ff3418cfda9 [ 3478.705093][T20741] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3478.724608][T20741] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3478.733091][T20741] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3478.741313][T20741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3478.749660][T20741] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3478.757467][T20741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 13:14:35 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:35 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00dd3acf000095e7e80ce9d46b003964a018600eed58b10580fa50bfe339471d90dcdd201830c06aa89b5e3f5870febb1c83563d3cd0202b1183616481e3347fd501"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='mem_connect\x00', r4}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0xae, 0x2, 0x2, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x100800, 0xfffffffffffffbff, 0x8, 0x5, 0x3, 0x401, 0xe000, 0x0, 0x3c, 0x0, 0x5}, r5, 0x6, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x40, 0x7, 0x4, 0x1, 0x0, 0x0, 0x2218, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x10400, 0x10000, 0x0, 0x9, 0x1, 0x8, 0x8, 0x0, 0x7f, 0x0, 0x7}, r5, 0x0, r2, 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x5}, [@generic={0x7f, 0x7, 0x3, 0x1, 0xffff}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xb8c}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x55, &(0x7f0000000440)=""/85, 0x41100, 0x1, '\x00', 0x0, 0x9, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r7, r1}, 0xc) 13:14:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x2, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}], &(0x7f0000000440)='GPL\x00', 0x7723, 0xde, &(0x7f0000000a00)=""/222, 0x40f00, 0xd8, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x6, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000b00)=[r0, r0], &(0x7f0000000b40)=[{0x2, 0x5, 0x4, 0x3}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x2, 0x10, 0x1e}, {0x3, 0x1, 0xf, 0xc}, {0x2, 0x3, 0xe, 0x1}, {0x4, 0x5, 0x9, 0x1}, {0x4, 0x1, 0x10, 0x1}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0xc9, &(0x7f0000000440), 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf0, 0x8, 0xffffffffffffff89, &(0x7f00000002c0)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59a, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x4e, &(0x7f0000000180)=""/78, 0x40f00, 0x8, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x4, 0x80, 0xfffffffb}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000880)=[r0, r0, r0, r5, r0, r0, r6, r0], &(0x7f0000001400)=[{0x2, 0x4, 0x2, 0x3}, {0x4, 0x1, 0x10, 0x8}, {0x4, 0x2, 0x8, 0xc}, {0x5, 0x1, 0x2}, {0x3, 0x3, 0x2, 0x6}, {0x3, 0x4, 0x1, 0xa}, {0x4, 0x1, 0x10, 0x1}, {0x1, 0x2, 0xe, 0x1}, {0x5, 0x2, 0x7, 0x7}, {0x2, 0x5, 0xe, 0x1}], 0x10, 0xdb8}, 0x90) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0xffff2c85, 0x0, r0, 0x80000001, '\x00', r2, r4, 0x1, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r6, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x19, 0x17, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x8, 0x2, 0x0, r0}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ldst={0x2, 0x3, 0x6, 0x0, 0x5, 0x100, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x0, 0x6, 0x40}]}, &(0x7f0000001200)='GPL\x00', 0x3, 0xaf, &(0x7f0000001240)=""/175, 0x40f00, 0x14, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001300)=[{0x4, 0x3, 0x5, 0xb}], 0x10, 0x93}, 0x90) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r3, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1e, 0x400, 0xfffffe00, 0x80000000, 0xdc, 0x1, 0x80000001, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x4, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000d00)='GPL\x00', 0x5, 0x52, &(0x7f0000000d40)=""/82, 0x40f00, 0x2, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000000e00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0x7, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[0x1, r5, r5, r4, r10], 0x0, 0x10, 0x7200}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) [ 3478.765279][T20741] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3478.773096][T20741] 13:14:35 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3801}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3478.826399][T20764] FAULT_INJECTION: forcing a failure. [ 3478.826399][T20764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3478.841074][T20764] CPU: 1 PID: 20764 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3478.851365][T20764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3478.861403][T20764] Call Trace: [ 3478.864693][T20764] [ 3478.867488][T20764] dump_stack_lvl+0x151/0x1b7 [ 3478.871989][T20764] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3478.877444][T20764] dump_stack+0x15/0x17 [ 3478.881450][T20764] should_fail+0x3c6/0x510 [ 3478.885692][T20764] should_fail_alloc_page+0x5a/0x80 [ 3478.890813][T20764] prepare_alloc_pages+0x15c/0x700 [ 3478.895761][T20764] ? __alloc_pages+0x8f0/0x8f0 [ 3478.900440][T20764] ? __alloc_pages_bulk+0xe40/0xe40 [ 3478.905486][T20764] __alloc_pages+0x18c/0x8f0 [ 3478.910032][T20764] ? prep_new_page+0x110/0x110 [ 3478.914803][T20764] ? 0xffffffffa002c000 [ 3478.918867][T20764] ? is_bpf_text_address+0x172/0x190 [ 3478.923990][T20764] pte_alloc_one+0x73/0x1b0 [ 3478.928329][T20764] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3478.933373][T20764] ? arch_stack_walk+0xf3/0x140 [ 3478.938049][T20764] __pte_alloc+0x86/0x350 [ 3478.942218][T20764] ? free_pgtables+0x280/0x280 [ 3478.946816][T20764] ? _raw_spin_lock+0xa4/0x1b0 [ 3478.951498][T20764] ? __kasan_check_write+0x14/0x20 [ 3478.956447][T20764] copy_page_range+0x28a8/0x2f90 [ 3478.961839][T20764] ? __kasan_slab_alloc+0xb1/0xe0 [ 3478.966688][T20764] ? pfn_valid+0x1e0/0x1e0 [ 3478.970938][T20764] ? rwsem_write_trylock+0x15b/0x290 [ 3478.976084][T20764] copy_mm+0xc7e/0x13e0 [ 3478.980072][T20764] ? copy_signal+0x610/0x610 [ 3478.984490][T20764] ? __init_rwsem+0xd6/0x1c0 [ 3478.988902][T20764] ? copy_signal+0x4e3/0x610 [ 3478.993337][T20764] copy_process+0x1149/0x3290 [ 3478.997847][T20764] ? proc_fail_nth_write+0x20b/0x290 [ 3479.003091][T20764] ? fsnotify_perm+0x6a/0x5d0 [ 3479.007594][T20764] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3479.012538][T20764] ? vfs_write+0x9ec/0x1110 [ 3479.017055][T20764] kernel_clone+0x21e/0x9e0 [ 3479.021530][T20764] ? file_end_write+0x1c0/0x1c0 [ 3479.026254][T20764] ? create_io_thread+0x1e0/0x1e0 [ 3479.031547][T20764] ? mutex_unlock+0xb2/0x260 [ 3479.035979][T20764] ? __mutex_lock_slowpath+0x10/0x10 [ 3479.041092][T20764] __x64_sys_clone+0x23f/0x290 [ 3479.045695][T20764] ? __do_sys_vfork+0x130/0x130 [ 3479.050374][T20764] ? ksys_write+0x260/0x2c0 [ 3479.054713][T20764] ? debug_smp_processor_id+0x17/0x20 [ 3479.060035][T20764] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3479.065933][T20764] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3479.071396][T20764] do_syscall_64+0x3d/0xb0 [ 3479.075641][T20764] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3479.081374][T20764] RIP: 0033:0x7ff3418cfda9 [ 3479.085621][T20764] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3479.105241][T20764] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3479.113481][T20764] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:35 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5100}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00dd3acf000095e7e80ce9d46b003964a018600eed58b10580fa50bfe339471d90dcdd201830c06aa89b5e3f5870febb1c83563d3cd0202b1183616481e3347fd501"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='mem_connect\x00', r4}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0xae, 0x2, 0x2, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x100800, 0xfffffffffffffbff, 0x8, 0x5, 0x3, 0x401, 0xe000, 0x0, 0x3c, 0x0, 0x5}, r5, 0x6, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x40, 0x7, 0x4, 0x1, 0x0, 0x0, 0x2218, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x10400, 0x10000, 0x0, 0x9, 0x1, 0x8, 0x8, 0x0, 0x7f, 0x0, 0x7}, r5, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x5}, [@generic={0x7f, 0x7, 0x3, 0x1, 0xffff}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xb8c}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x55, &(0x7f0000000440)=""/85, 0x41100, 0x1, '\x00', 0x0, 0x9, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r7, r1}, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00dd3acf000095e7e80ce9d46b003964a018600eed58b10580fa50bfe339471d90dcdd201830c06aa89b5e3f5870febb1c83563d3cd0202b1183616481e3347fd501"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) gettid() (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='mem_connect\x00', r4}, 0x10) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0xae, 0x2, 0x2, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x100800, 0xfffffffffffffbff, 0x8, 0x5, 0x3, 0x401, 0xe000, 0x0, 0x3c, 0x0, 0x5}, r5, 0x6, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x40, 0x7, 0x4, 0x1, 0x0, 0x0, 0x2218, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x10400, 0x10000, 0x0, 0x9, 0x1, 0x8, 0x8, 0x0, 0x7f, 0x0, 0x7}, r5, 0x0, r2, 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x5}, [@generic={0x7f, 0x7, 0x3, 0x1, 0xffff}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xb8c}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x55, &(0x7f0000000440)=""/85, 0x41100, 0x1, '\x00', 0x0, 0x9, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r7, r1}, 0xc) (async) 13:14:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x2, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}], &(0x7f0000000440)='GPL\x00', 0x7723, 0xde, &(0x7f0000000a00)=""/222, 0x40f00, 0xd8, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x6, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000b00)=[r0, r0], &(0x7f0000000b40)=[{0x2, 0x5, 0x4, 0x3}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x2, 0x10, 0x1e}, {0x3, 0x1, 0xf, 0xc}, {0x2, 0x3, 0xe, 0x1}, {0x4, 0x5, 0x9, 0x1}, {0x4, 0x1, 0x10, 0x1}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0xc9, &(0x7f0000000440), 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf0, 0x8, 0xffffffffffffff89, &(0x7f00000002c0)}}, 0x10) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) (async, rerun: 32) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) (rerun: 32) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59a, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x4e, &(0x7f0000000180)=""/78, 0x40f00, 0x8, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x4, 0x80, 0xfffffffb}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000880)=[r0, r0, r0, r5, r0, r0, r6, r0], &(0x7f0000001400)=[{0x2, 0x4, 0x2, 0x3}, {0x4, 0x1, 0x10, 0x8}, {0x4, 0x2, 0x8, 0xc}, {0x5, 0x1, 0x2}, {0x3, 0x3, 0x2, 0x6}, {0x3, 0x4, 0x1, 0xa}, {0x4, 0x1, 0x10, 0x1}, {0x1, 0x2, 0xe, 0x1}, {0x5, 0x2, 0x7, 0x7}, {0x2, 0x5, 0xe, 0x1}], 0x10, 0xdb8}, 0x90) (async, rerun: 64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0xffff2c85, 0x0, r0, 0x80000001, '\x00', r2, r4, 0x1, 0x5}, 0x48) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r6, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x19, 0x17, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x8, 0x2, 0x0, r0}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ldst={0x2, 0x3, 0x6, 0x0, 0x5, 0x100, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x0, 0x6, 0x40}]}, &(0x7f0000001200)='GPL\x00', 0x3, 0xaf, &(0x7f0000001240)=""/175, 0x40f00, 0x14, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001300)=[{0x4, 0x3, 0x5, 0xb}], 0x10, 0x93}, 0x90) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r3, 0x4) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1e, 0x400, 0xfffffe00, 0x80000000, 0xdc, 0x1, 0x80000001, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x4, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000d00)='GPL\x00', 0x5, 0x52, &(0x7f0000000d40)=""/82, 0x40f00, 0x2, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000000e00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0x7, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[0x1, r5, r5, r4, r10], 0x0, 0x10, 0x7200}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 13:14:35 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3f00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3479.121316][T20764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3479.129102][T20764] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3479.136919][T20764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3479.144723][T20764] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3479.152541][T20764] 13:14:35 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:35 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x6000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3479.223997][T20780] FAULT_INJECTION: forcing a failure. [ 3479.223997][T20780] name failslab, interval 1, probability 0, space 0, times 0 [ 3479.244021][T20780] CPU: 0 PID: 20780 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3479.254286][T20780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3479.264183][T20780] Call Trace: [ 3479.267418][T20780] [ 3479.270194][T20780] dump_stack_lvl+0x151/0x1b7 [ 3479.274798][T20780] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3479.280261][T20780] dump_stack+0x15/0x17 [ 3479.284271][T20780] should_fail+0x3c6/0x510 [ 3479.288512][T20780] __should_failslab+0xa4/0xe0 [ 3479.293205][T20780] ? vm_area_dup+0x26/0x230 [ 3479.297637][T20780] should_failslab+0x9/0x20 [ 3479.302332][T20780] slab_pre_alloc_hook+0x37/0xd0 [ 3479.307092][T20780] ? vm_area_dup+0x26/0x230 [ 3479.311430][T20780] kmem_cache_alloc+0x44/0x200 [ 3479.316139][T20780] vm_area_dup+0x26/0x230 [ 3479.320484][T20780] copy_mm+0x9a1/0x13e0 [ 3479.324475][T20780] ? copy_signal+0x610/0x610 [ 3479.328977][T20780] ? __init_rwsem+0xd6/0x1c0 [ 3479.333398][T20780] ? copy_signal+0x4e3/0x610 [ 3479.337831][T20780] copy_process+0x1149/0x3290 [ 3479.342352][T20780] ? proc_fail_nth_write+0x20b/0x290 [ 3479.347467][T20780] ? fsnotify_perm+0x6a/0x5d0 [ 3479.351980][T20780] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3479.357103][T20780] ? vfs_write+0x9ec/0x1110 [ 3479.361446][T20780] kernel_clone+0x21e/0x9e0 [ 3479.365785][T20780] ? file_end_write+0x1c0/0x1c0 [ 3479.370468][T20780] ? create_io_thread+0x1e0/0x1e0 [ 3479.375324][T20780] ? mutex_unlock+0xb2/0x260 [ 3479.379749][T20780] ? __mutex_lock_slowpath+0x10/0x10 [ 3479.384871][T20780] __x64_sys_clone+0x23f/0x290 [ 3479.389717][T20780] ? __do_sys_vfork+0x130/0x130 [ 3479.394383][T20780] ? ksys_write+0x260/0x2c0 [ 3479.398724][T20780] ? debug_smp_processor_id+0x17/0x20 [ 3479.403941][T20780] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3479.409856][T20780] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3479.415327][T20780] do_syscall_64+0x3d/0xb0 [ 3479.419554][T20780] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3479.425366][T20780] RIP: 0033:0x7ff3418cfda9 [ 3479.429632][T20780] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3479.449182][T20780] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3479.457754][T20780] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3479.465568][T20780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x2, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}], &(0x7f0000000440)='GPL\x00', 0x7723, 0xde, &(0x7f0000000a00)=""/222, 0x40f00, 0xd8, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x6, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000b00)=[r0, r0], &(0x7f0000000b40)=[{0x2, 0x5, 0x4, 0x3}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x2, 0x10, 0x1e}, {0x3, 0x1, 0xf, 0xc}, {0x2, 0x3, 0xe, 0x1}, {0x4, 0x5, 0x9, 0x1}, {0x4, 0x1, 0x10, 0x1}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0xc9, &(0x7f0000000440), 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf0, 0x8, 0xffffffffffffff89, &(0x7f00000002c0)}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59a, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x4e, &(0x7f0000000180)=""/78, 0x40f00, 0x8, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x4, 0x80, 0xfffffffb}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000880)=[r0, r0, r0, r5, r0, r0, r6, r0], &(0x7f0000001400)=[{0x2, 0x4, 0x2, 0x3}, {0x4, 0x1, 0x10, 0x8}, {0x4, 0x2, 0x8, 0xc}, {0x5, 0x1, 0x2}, {0x3, 0x3, 0x2, 0x6}, {0x3, 0x4, 0x1, 0xa}, {0x4, 0x1, 0x10, 0x1}, {0x1, 0x2, 0xe, 0x1}, {0x5, 0x2, 0x7, 0x7}, {0x2, 0x5, 0xe, 0x1}], 0x10, 0xdb8}, 0x90) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0xffff2c85, 0x0, r0, 0x80000001, '\x00', r2, r4, 0x1, 0x5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r6, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x19, 0x17, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x8, 0x2, 0x0, r0}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ldst={0x2, 0x3, 0x6, 0x0, 0x5, 0x100, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x0, 0x6, 0x40}]}, &(0x7f0000001200)='GPL\x00', 0x3, 0xaf, &(0x7f0000001240)=""/175, 0x40f00, 0x14, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001300)=[{0x4, 0x3, 0x5, 0xb}], 0x10, 0x93}, 0x90) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r3, 0x4) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1e, 0x400, 0xfffffe00, 0x80000000, 0xdc, 0x1, 0x80000001, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x4, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000d00)='GPL\x00', 0x5, 0x52, &(0x7f0000000d40)=""/82, 0x40f00, 0x2, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000000e00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0x7, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[0x1, r5, r5, r4, r10], 0x0, 0x10, 0x7200}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:35 executing program 4: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) gettid() r0 = syz_clone(0x60000000, 0x0, 0x0, &(0x7f00000044c0), &(0x7f0000004500), &(0x7f0000004540)="154d0bdc7b3ef127b8a8e07063795fee845888a5d1682f61a148ba6bdd893627ffa1e4bd323e") syz_clone(0x50000400, &(0x7f0000004580)="6e5e0c5b02cbe9e0e25250d9", 0xc, &(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)="ac449afc1ee1babc6b7addc7e9112f4e4609a8395e06d1f6757d77d91dcb31c8f55d456086ed22cfd5110729d52bbf914d99faf436d62f0a28a888ab46bd238f680830632e7fa053e518310ee54e30489666028b21b10edcd82150caf3de4e928b3b354647ff01c06dc910d5fc8d3d2a7c9bbe") r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0xc, r2, 0xf) r3 = perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000880), 0x4}, 0x90004, 0x9, 0x8000, 0x3, 0x1f, 0x0, 0x0, 0x0, 0xffff}, r4, 0xe, r3, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x0, 0x96, 0x83, 0x0, 0xc501, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x2420, 0x400, 0x7, 0x7, 0x7, 0x3, 0x56b8, 0x0, 0x74de, 0x0, 0x98a}, r0, 0x10, r4, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200182, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000280)="83e7fd9388529acaa17c934f140c0ddc687f63caf2dadf9548a2e8365a85f78b983882041e75261a155184c7d20e345b0c419dc10f5b6fef6873381ba159e4b8897c5f4e977f451e53c717f2784e975953dc6aa1b326b29de7ee0fd675d554c811ce1e27bcad79bfc805d5643f1372edb3aabe5d", 0x74}, {&(0x7f0000000140)="5868055d88f003c4b01b56a82ab1e0c129e4058328ff01ecc7034e3b7ce4023c39064a444a75186b19432c5a26490b", 0x2f}, {&(0x7f0000000300)="55d04a1d2cc500cdf51777a4d90518c5dc44bb1ea0c35a47f0fbc2d45afdb61ca6dc802dbfbdd1f2c98a24c562c9119ff85ef6f986404bef35526a3a9b90e91008f3f92ffa38e976e71d2d9b74bee4ffad50c392cc28b053ba749062bc22", 0x5e}, {&(0x7f0000000380)="28991defa969d4ca567425e89d73488346ae0e229406b25475830a6351c2ced37577f06a42722674675d1b06a4bc3578538a3408cb4ad0847652851e5b093450c86a58d0e684e02e161d6a1cd9d3cfa77644a59dded2a717a077882140a7ad47b0e0de1e97b45526391c5b26551cf827c588c1ffba75d725c6adc49abe5f09351ca909b3ee3f", 0x86}, {&(0x7f0000000440)="43c679187f62a90dc3c5b2c079288d1484057575631d5de56c3cbfbbfba287286aa53f8b20b1045fa09b62e391640317013a4c1ba1aa2e0a3a74addf3731c165abf7d0aabd55be6dbf19b9b149f350bd0a19abe55035a34c6c86243858cb62e376207ad9a4c83daf236c5d964241df469194ad1e6d1bfe3d23b43bb408bc74553bbfe195e0d3d29274aa62fd99d0cdafc3edadbfb67d24064f795cdc9205ce05dcf7020f29dc426b86f59949e6aa63c2c7684aa3c77b5b47b217c834", 0xbc}, {&(0x7f0000000500)="dd1fc52d9ade038d139a64b2456a6bddc29e7004e67b4f63f68a50b37947520ae2935267b7884a957e0b66d6aa30ecd72a579182406a6e7cef9797f55bc7b674e6d609348927d34150be03ee6b78bcba8c53c20c986c47799c86125c0b1356922fc7aab7125d512d335b419087cdcac0aee5181ffed42687699eb40e4f973c22604b166aa483a607b6fb3d385efb8edaec178bb8fa8fc2d8e76cc00581b4972fcca20c56e5eb9a7aeec285f23d7b8526892d8157a738f99887cc4f325d63385857ea6b9ac5e44a5fb95cc37895fcf9b8372a96bc97b286b052c0346733f0625af17525b7bf5eafdb1bffd5b9a8cbc85738407887", 0xf4}, {&(0x7f0000000700)="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", 0x143}], 0x7}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) 13:14:35 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x4000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) [ 3479.473372][T20780] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3479.481401][T20780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3479.489301][T20780] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3479.497461][T20780] [ 3479.537162][T20815] FAULT_INJECTION: forcing a failure. [ 3479.537162][T20815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3479.551335][T20815] CPU: 0 PID: 20815 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3479.561490][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3479.571390][T20815] Call Trace: [ 3479.574637][T20815] [ 3479.577393][T20815] dump_stack_lvl+0x151/0x1b7 [ 3479.581906][T20815] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3479.587441][T20815] ? __alloc_pages+0x27e/0x8f0 [ 3479.592060][T20815] dump_stack+0x15/0x17 [ 3479.596137][T20815] should_fail+0x3c6/0x510 [ 3479.600392][T20815] should_fail_alloc_page+0x5a/0x80 [ 3479.605426][T20815] prepare_alloc_pages+0x15c/0x700 [ 3479.610458][T20815] ? page_ext_put+0x1c/0x30 [ 3479.614804][T20815] ? __alloc_pages_bulk+0xe40/0xe40 [ 3479.619845][T20815] ? post_alloc_hook+0x1a3/0x1b0 [ 3479.624629][T20815] __alloc_pages+0x18c/0x8f0 [ 3479.629136][T20815] ? prep_new_page+0x110/0x110 [ 3479.633722][T20815] ? 0xffffffffa002c000 [ 3479.637720][T20815] ? is_bpf_text_address+0x172/0x190 [ 3479.642831][T20815] pte_alloc_one+0x73/0x1b0 [ 3479.647172][T20815] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3479.652297][T20815] ? arch_stack_walk+0xf3/0x140 [ 3479.656980][T20815] __pte_alloc+0x86/0x350 [ 3479.661147][T20815] ? free_pgtables+0x280/0x280 [ 3479.666006][T20815] ? _raw_spin_lock+0xa4/0x1b0 [ 3479.670695][T20815] ? __kasan_check_write+0x14/0x20 [ 3479.675638][T20815] copy_page_range+0x28a8/0x2f90 [ 3479.680411][T20815] ? __kasan_slab_alloc+0xb1/0xe0 [ 3479.686065][T20815] ? pfn_valid+0x1e0/0x1e0 [ 3479.690316][T20815] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 3479.695864][T20815] ? __rb_insert_augmented+0x5de/0x610 [ 3479.701224][T20815] copy_mm+0xc7e/0x13e0 [ 3479.705154][T20815] ? copy_signal+0x610/0x610 [ 3479.709673][T20815] ? __init_rwsem+0xd6/0x1c0 [ 3479.714096][T20815] ? copy_signal+0x4e3/0x610 [ 3479.718526][T20815] copy_process+0x1149/0x3290 [ 3479.723037][T20815] ? proc_fail_nth_write+0x20b/0x290 [ 3479.728159][T20815] ? fsnotify_perm+0x6a/0x5d0 [ 3479.732670][T20815] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3479.737618][T20815] ? vfs_write+0x9ec/0x1110 [ 3479.742207][T20815] kernel_clone+0x21e/0x9e0 [ 3479.746547][T20815] ? file_end_write+0x1c0/0x1c0 [ 3479.751226][T20815] ? create_io_thread+0x1e0/0x1e0 [ 3479.756083][T20815] ? mutex_unlock+0xb2/0x260 [ 3479.760599][T20815] ? __mutex_lock_slowpath+0x10/0x10 [ 3479.765721][T20815] __x64_sys_clone+0x23f/0x290 [ 3479.770319][T20815] ? __do_sys_vfork+0x130/0x130 [ 3479.775004][T20815] ? ksys_write+0x260/0x2c0 [ 3479.779463][T20815] ? debug_smp_processor_id+0x17/0x20 [ 3479.784915][T20815] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3479.791089][T20815] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3479.796561][T20815] do_syscall_64+0x3d/0xb0 [ 3479.800821][T20815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3479.806621][T20815] RIP: 0033:0x7ff3418cfda9 [ 3479.810876][T20815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 13:14:36 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x6001}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 13:14:36 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ef00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3479.831794][T20815] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3479.840324][T20815] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3479.848468][T20815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3479.856280][T20815] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3479.864256][T20815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3479.872163][T20815] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3479.880427][T20815] 13:14:36 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ef00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ef00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) 13:14:36 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x4100}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:36 executing program 4: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) gettid() (async) gettid() r0 = syz_clone(0x60000000, 0x0, 0x0, &(0x7f00000044c0), &(0x7f0000004500), &(0x7f0000004540)="154d0bdc7b3ef127b8a8e07063795fee845888a5d1682f61a148ba6bdd893627ffa1e4bd323e") syz_clone(0x50000400, &(0x7f0000004580)="6e5e0c5b02cbe9e0e25250d9", 0xc, &(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)="ac449afc1ee1babc6b7addc7e9112f4e4609a8395e06d1f6757d77d91dcb31c8f55d456086ed22cfd5110729d52bbf914d99faf436d62f0a28a888ab46bd238f680830632e7fa053e518310ee54e30489666028b21b10edcd82150caf3de4e928b3b354647ff01c06dc910d5fc8d3d2a7c9bbe") r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0xc, r2, 0xf) (async) perf_event_open(0x0, r1, 0xc, r2, 0xf) r3 = perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000880), 0x4}, 0x90004, 0x9, 0x8000, 0x3, 0x1f, 0x0, 0x0, 0x0, 0xffff}, r4, 0xe, r3, 0x0) (async) perf_event_open$cgroup(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000880), 0x4}, 0x90004, 0x9, 0x8000, 0x3, 0x1f, 0x0, 0x0, 0x0, 0xffff}, r4, 0xe, r3, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x0, 0x96, 0x83, 0x0, 0xc501, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x2420, 0x400, 0x7, 0x7, 0x7, 0x3, 0x56b8, 0x0, 0x74de, 0x0, 0x98a}, r0, 0x10, r4, 0xa) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x0, 0x96, 0x83, 0x0, 0xc501, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x2420, 0x400, 0x7, 0x7, 0x7, 0x3, 0x56b8, 0x0, 0x74de, 0x0, 0x98a}, r0, 0x10, r4, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200182, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000280)="83e7fd9388529acaa17c934f140c0ddc687f63caf2dadf9548a2e8365a85f78b983882041e75261a155184c7d20e345b0c419dc10f5b6fef6873381ba159e4b8897c5f4e977f451e53c717f2784e975953dc6aa1b326b29de7ee0fd675d554c811ce1e27bcad79bfc805d5643f1372edb3aabe5d", 0x74}, {&(0x7f0000000140)="5868055d88f003c4b01b56a82ab1e0c129e4058328ff01ecc7034e3b7ce4023c39064a444a75186b19432c5a26490b", 0x2f}, {&(0x7f0000000300)="55d04a1d2cc500cdf51777a4d90518c5dc44bb1ea0c35a47f0fbc2d45afdb61ca6dc802dbfbdd1f2c98a24c562c9119ff85ef6f986404bef35526a3a9b90e91008f3f92ffa38e976e71d2d9b74bee4ffad50c392cc28b053ba749062bc22", 0x5e}, {&(0x7f0000000380)="28991defa969d4ca567425e89d73488346ae0e229406b25475830a6351c2ced37577f06a42722674675d1b06a4bc3578538a3408cb4ad0847652851e5b093450c86a58d0e684e02e161d6a1cd9d3cfa77644a59dded2a717a077882140a7ad47b0e0de1e97b45526391c5b26551cf827c588c1ffba75d725c6adc49abe5f09351ca909b3ee3f", 0x86}, {&(0x7f0000000440)="43c679187f62a90dc3c5b2c079288d1484057575631d5de56c3cbfbbfba287286aa53f8b20b1045fa09b62e391640317013a4c1ba1aa2e0a3a74addf3731c165abf7d0aabd55be6dbf19b9b149f350bd0a19abe55035a34c6c86243858cb62e376207ad9a4c83daf236c5d964241df469194ad1e6d1bfe3d23b43bb408bc74553bbfe195e0d3d29274aa62fd99d0cdafc3edadbfb67d24064f795cdc9205ce05dcf7020f29dc426b86f59949e6aa63c2c7684aa3c77b5b47b217c834", 0xbc}, {&(0x7f0000000500)="dd1fc52d9ade038d139a64b2456a6bddc29e7004e67b4f63f68a50b37947520ae2935267b7884a957e0b66d6aa30ecd72a579182406a6e7cef9797f55bc7b674e6d609348927d34150be03ee6b78bcba8c53c20c986c47799c86125c0b1356922fc7aab7125d512d335b419087cdcac0aee5181ffed42687699eb40e4f973c22604b166aa483a607b6fb3d385efb8edaec178bb8fa8fc2d8e76cc00581b4972fcca20c56e5eb9a7aeec285f23d7b8526892d8157a738f99887cc4f325d63385857ea6b9ac5e44a5fb95cc37895fcf9b8372a96bc97b286b052c0346733f0625af17525b7bf5eafdb1bffd5b9a8cbc85738407887", 0xf4}, {&(0x7f0000000700)="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", 0x143}], 0x7}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) [ 3479.937943][T20821] FAULT_INJECTION: forcing a failure. [ 3479.937943][T20821] name failslab, interval 1, probability 0, space 0, times 0 [ 3479.956438][T20821] CPU: 1 PID: 20821 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3479.966629][T20821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3479.976604][T20821] Call Trace: [ 3479.979743][T20821] [ 3479.982499][T20821] dump_stack_lvl+0x151/0x1b7 [ 3479.987014][T20821] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3479.992493][T20821] dump_stack+0x15/0x17 [ 3479.996564][T20821] should_fail+0x3c6/0x510 [ 3480.001139][T20821] __should_failslab+0xa4/0xe0 [ 3480.005941][T20821] ? vm_area_dup+0x26/0x230 [ 3480.010284][T20821] should_failslab+0x9/0x20 [ 3480.017010][T20821] slab_pre_alloc_hook+0x37/0xd0 [ 3480.021783][T20821] ? vm_area_dup+0x26/0x230 [ 3480.028532][T20821] kmem_cache_alloc+0x44/0x200 [ 3480.033221][T20821] vm_area_dup+0x26/0x230 [ 3480.037465][T20821] copy_mm+0x9a1/0x13e0 [ 3480.041540][T20821] ? copy_signal+0x610/0x610 [ 3480.048775][T20821] ? __init_rwsem+0xd6/0x1c0 [ 3480.053268][T20821] ? copy_signal+0x4e3/0x610 [ 3480.058704][T20821] copy_process+0x1149/0x3290 [ 3480.067772][T20821] ? proc_fail_nth_write+0x20b/0x290 [ 3480.074247][T20821] ? fsnotify_perm+0x6a/0x5d0 [ 3480.079074][T20821] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3480.084021][T20821] ? vfs_write+0x9ec/0x1110 [ 3480.088366][T20821] kernel_clone+0x21e/0x9e0 [ 3480.092826][T20821] ? file_end_write+0x1c0/0x1c0 [ 3480.097454][T20821] ? create_io_thread+0x1e0/0x1e0 [ 3480.102403][T20821] ? mutex_unlock+0xb2/0x260 [ 3480.106828][T20821] ? __mutex_lock_slowpath+0x10/0x10 [ 3480.111950][T20821] __x64_sys_clone+0x23f/0x290 [ 3480.116577][T20821] ? __do_sys_vfork+0x130/0x130 [ 3480.121242][T20821] ? ksys_write+0x260/0x2c0 [ 3480.125578][T20821] ? debug_smp_processor_id+0x17/0x20 [ 3480.130782][T20821] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3480.136683][T20821] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3480.142151][T20821] do_syscall_64+0x3d/0xb0 [ 3480.146670][T20821] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3480.152479][T20821] RIP: 0033:0x7ff3418cfda9 [ 3480.156736][T20821] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3480.177050][T20821] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 13:14:36 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x6202}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:36 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ef00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:36 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x4902}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:36 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x6800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3480.185389][T20821] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3480.193547][T20821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3480.201353][T20821] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3480.209358][T20821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3480.217267][T20821] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3480.225102][T20821] 13:14:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 13:14:36 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x5000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xd6, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000480), 0x8, 0x17, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r1, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000d40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x8, &(0x7f0000000b80)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], &(0x7f0000000c00)='GPL\x00', 0x40, 0x3b, &(0x7f0000000c40)=""/59, 0x41000, 0x28, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)=[r7, r4], &(0x7f0000001080)=[{0x0, 0x3, 0x6, 0x7}, {0x0, 0x2, 0x8, 0x2}, {0x3, 0x1, 0xb, 0x5}, {0x3, 0x3, 0xb, 0xc}, {0x2, 0x5, 0x8, 0x1}, {0x2, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x10, 0x8}, {0x0, 0x4, 0xf}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x1000}, 0x90) sendmsg$unix(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="99bb02fd146546eb847ca938d9085e00c22da06463268f47dd28f8c36c09797021279e21e592f8beac71eeb3be14276afccb7f2e3d25e512f705df3af6108d6ab792899882501ee9c9ce0c1979f3d48c9e5d0d91713d18551db0bece9d878d17b0984a05ff22a1", 0x67}, {&(0x7f0000000980)="6022d8f4361fc1a78a0bf5e091b5679a21c2fa4f8021476add67a3b8ee3e700de77f9c7198d253e6294e0d14628b580ccd81690052865e694259ac9526153f07c68e43671107b8235237d27bf39d49ed83721f8da68d73ca50fd227bc75397de52dc2459ee62296c7f0fbd502ec043a6ce49181a69893312347248f03b96aad19839189e4a3b26e7058c20ea41323e2b6258feeee9f754eb0d7eb3fd8991ca553ef8cd484c5a1dbc06140ec3128371f8ed56566666fa7793316dab779ab3", 0xbe}, {&(0x7f0000000a40)="b7e9f3f2d9e8b87325710b7a6c03a0d91968769b0235aa2c0d1e79e751abbbaa0075e35d82327d64eb9bddf239c37f82acbdf5dd1a5f78447d0f8f387bf5fe8fe3161dabdf8bfc52b47765334fd7448b4412b3d7284104c02a3554572729c893044085818e55dcccd2fc0d108c62a2f0177d9980e8b0e5470b9bdf1df3978067125628ca4be6233473d200580931", 0x8e}], 0x3, 0x0, 0x0, 0x24040000}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000b0010000000000000100000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018000000670e00000000000007000000810500015f0fffff15128000fcffffff1859000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x2a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x5, 0x8000, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r0, r0, r0], &(0x7f0000000780)=[{0x2, 0x1, 0xe, 0xb}, {0x3, 0x1, 0xb, 0xa}, {0x3, 0x2, 0x10, 0x1}, {0x0, 0x2, 0xc, 0xa}, {0x4, 0x2, 0x6, 0xb}, {0x5, 0x2, 0x10, 0x9}, {0x0, 0x1, 0x9, 0x4}], 0x10, 0x49cab495}, 0x90) 13:14:36 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x7000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3480.296066][T20849] FAULT_INJECTION: forcing a failure. [ 3480.296066][T20849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:14:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xd6, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000480), 0x8, 0x17, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r1, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000d40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x8, &(0x7f0000000b80)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], &(0x7f0000000c00)='GPL\x00', 0x40, 0x3b, &(0x7f0000000c40)=""/59, 0x41000, 0x28, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)=[r7, r4], &(0x7f0000001080)=[{0x0, 0x3, 0x6, 0x7}, {0x0, 0x2, 0x8, 0x2}, {0x3, 0x1, 0xb, 0x5}, {0x3, 0x3, 0xb, 0xc}, {0x2, 0x5, 0x8, 0x1}, {0x2, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x10, 0x8}, {0x0, 0x4, 0xf}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x1000}, 0x90) (async) sendmsg$unix(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="99bb02fd146546eb847ca938d9085e00c22da06463268f47dd28f8c36c09797021279e21e592f8beac71eeb3be14276afccb7f2e3d25e512f705df3af6108d6ab792899882501ee9c9ce0c1979f3d48c9e5d0d91713d18551db0bece9d878d17b0984a05ff22a1", 0x67}, {&(0x7f0000000980)="6022d8f4361fc1a78a0bf5e091b5679a21c2fa4f8021476add67a3b8ee3e700de77f9c7198d253e6294e0d14628b580ccd81690052865e694259ac9526153f07c68e43671107b8235237d27bf39d49ed83721f8da68d73ca50fd227bc75397de52dc2459ee62296c7f0fbd502ec043a6ce49181a69893312347248f03b96aad19839189e4a3b26e7058c20ea41323e2b6258feeee9f754eb0d7eb3fd8991ca553ef8cd484c5a1dbc06140ec3128371f8ed56566666fa7793316dab779ab3", 0xbe}, {&(0x7f0000000a40)="b7e9f3f2d9e8b87325710b7a6c03a0d91968769b0235aa2c0d1e79e751abbbaa0075e35d82327d64eb9bddf239c37f82acbdf5dd1a5f78447d0f8f387bf5fe8fe3161dabdf8bfc52b47765334fd7448b4412b3d7284104c02a3554572729c893044085818e55dcccd2fc0d108c62a2f0177d9980e8b0e5470b9bdf1df3978067125628ca4be6233473d200580931", 0x8e}], 0x3, 0x0, 0x0, 0x24040000}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000b0010000000000000100000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018000000670e00000000000007000000810500015f0fffff15128000fcffffff1859000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x2a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x5, 0x8000, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r0, r0, r0], &(0x7f0000000780)=[{0x2, 0x1, 0xe, 0xb}, {0x3, 0x1, 0xb, 0xa}, {0x3, 0x2, 0x10, 0x1}, {0x0, 0x2, 0xc, 0xa}, {0x4, 0x2, 0x6, 0xb}, {0x5, 0x2, 0x10, 0x9}, {0x0, 0x1, 0x9, 0x4}], 0x10, 0x49cab495}, 0x90) 13:14:36 executing program 4: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) (async) gettid() (async) r0 = syz_clone(0x60000000, 0x0, 0x0, &(0x7f00000044c0), &(0x7f0000004500), &(0x7f0000004540)="154d0bdc7b3ef127b8a8e07063795fee845888a5d1682f61a148ba6bdd893627ffa1e4bd323e") (async) syz_clone(0x50000400, &(0x7f0000004580)="6e5e0c5b02cbe9e0e25250d9", 0xc, &(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)="ac449afc1ee1babc6b7addc7e9112f4e4609a8395e06d1f6757d77d91dcb31c8f55d456086ed22cfd5110729d52bbf914d99faf436d62f0a28a888ab46bd238f680830632e7fa053e518310ee54e30489666028b21b10edcd82150caf3de4e928b3b354647ff01c06dc910d5fc8d3d2a7c9bbe") r1 = gettid() (async) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0xc, r2, 0xf) (async) r3 = perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000008c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000880), 0x4}, 0x90004, 0x9, 0x8000, 0x3, 0x1f, 0x0, 0x0, 0x0, 0xffff}, r4, 0xe, r3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x0, 0x96, 0x83, 0x0, 0xc501, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x2420, 0x400, 0x7, 0x7, 0x7, 0x3, 0x56b8, 0x0, 0x74de, 0x0, 0x98a}, r0, 0x10, r4, 0xa) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200182, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000280)="83e7fd9388529acaa17c934f140c0ddc687f63caf2dadf9548a2e8365a85f78b983882041e75261a155184c7d20e345b0c419dc10f5b6fef6873381ba159e4b8897c5f4e977f451e53c717f2784e975953dc6aa1b326b29de7ee0fd675d554c811ce1e27bcad79bfc805d5643f1372edb3aabe5d", 0x74}, {&(0x7f0000000140)="5868055d88f003c4b01b56a82ab1e0c129e4058328ff01ecc7034e3b7ce4023c39064a444a75186b19432c5a26490b", 0x2f}, {&(0x7f0000000300)="55d04a1d2cc500cdf51777a4d90518c5dc44bb1ea0c35a47f0fbc2d45afdb61ca6dc802dbfbdd1f2c98a24c562c9119ff85ef6f986404bef35526a3a9b90e91008f3f92ffa38e976e71d2d9b74bee4ffad50c392cc28b053ba749062bc22", 0x5e}, {&(0x7f0000000380)="28991defa969d4ca567425e89d73488346ae0e229406b25475830a6351c2ced37577f06a42722674675d1b06a4bc3578538a3408cb4ad0847652851e5b093450c86a58d0e684e02e161d6a1cd9d3cfa77644a59dded2a717a077882140a7ad47b0e0de1e97b45526391c5b26551cf827c588c1ffba75d725c6adc49abe5f09351ca909b3ee3f", 0x86}, {&(0x7f0000000440)="43c679187f62a90dc3c5b2c079288d1484057575631d5de56c3cbfbbfba287286aa53f8b20b1045fa09b62e391640317013a4c1ba1aa2e0a3a74addf3731c165abf7d0aabd55be6dbf19b9b149f350bd0a19abe55035a34c6c86243858cb62e376207ad9a4c83daf236c5d964241df469194ad1e6d1bfe3d23b43bb408bc74553bbfe195e0d3d29274aa62fd99d0cdafc3edadbfb67d24064f795cdc9205ce05dcf7020f29dc426b86f59949e6aa63c2c7684aa3c77b5b47b217c834", 0xbc}, {&(0x7f0000000500)="dd1fc52d9ade038d139a64b2456a6bddc29e7004e67b4f63f68a50b37947520ae2935267b7884a957e0b66d6aa30ecd72a579182406a6e7cef9797f55bc7b674e6d609348927d34150be03ee6b78bcba8c53c20c986c47799c86125c0b1356922fc7aab7125d512d335b419087cdcac0aee5181ffed42687699eb40e4f973c22604b166aa483a607b6fb3d385efb8edaec178bb8fa8fc2d8e76cc00581b4972fcca20c56e5eb9a7aeec285f23d7b8526892d8157a738f99887cc4f325d63385857ea6b9ac5e44a5fb95cc37895fcf9b8372a96bc97b286b052c0346733f0625af17525b7bf5eafdb1bffd5b9a8cbc85738407887", 0xf4}, {&(0x7f0000000700)="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", 0x143}], 0x7}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) (rerun: 32) [ 3480.336210][T20849] CPU: 0 PID: 20849 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3480.346381][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3480.356275][T20849] Call Trace: [ 3480.359409][T20849] [ 3480.362175][T20849] dump_stack_lvl+0x151/0x1b7 [ 3480.366866][T20849] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3480.372341][T20849] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 3480.378073][T20849] dump_stack+0x15/0x17 [ 3480.382062][T20849] should_fail+0x3c6/0x510 [ 3480.386554][T20849] should_fail_alloc_page+0x5a/0x80 [ 3480.391548][T20849] prepare_alloc_pages+0x15c/0x700 13:14:36 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x80000000c8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14f2f7ff0080679f3ea2", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) [ 3480.396508][T20849] ? __alloc_pages_bulk+0xe40/0xe40 [ 3480.401520][T20849] ? sched_clock+0x9/0x10 [ 3480.405689][T20849] ? native_set_ldt+0x360/0x360 [ 3480.410383][T20849] __alloc_pages+0x18c/0x8f0 [ 3480.414911][T20849] ? _raw_spin_unlock+0x4d/0x70 [ 3480.419779][T20849] ? prep_new_page+0x110/0x110 [ 3480.424380][T20849] pte_alloc_one+0x73/0x1b0 [ 3480.428715][T20849] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3480.433749][T20849] ? preempt_schedule+0xd9/0xe0 [ 3480.438523][T20849] ? preempt_schedule_common+0xbe/0xf0 [ 3480.443952][T20849] __pte_alloc+0x86/0x350 [ 3480.448362][T20849] ? free_pgtables+0x280/0x280 [ 3480.452975][T20849] ? _raw_spin_lock+0xa4/0x1b0 [ 3480.457562][T20849] ? __kasan_check_write+0x14/0x20 [ 3480.462507][T20849] copy_page_range+0x28a8/0x2f90 [ 3480.467515][T20849] ? __kasan_slab_alloc+0xb1/0xe0 [ 3480.472478][T20849] ? pfn_valid+0x1e0/0x1e0 [ 3480.476714][T20849] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3480.482705][T20849] ? __rb_insert_augmented+0x5de/0x610 [ 3480.487998][T20849] copy_mm+0xc7e/0x13e0 [ 3480.491992][T20849] ? copy_signal+0x610/0x610 [ 3480.496414][T20849] ? __init_rwsem+0xd6/0x1c0 [ 3480.501015][T20849] ? copy_signal+0x4e3/0x610 [ 3480.505541][T20849] copy_process+0x1149/0x3290 [ 3480.510058][T20849] ? proc_fail_nth_write+0x20b/0x290 [ 3480.515176][T20849] ? fsnotify_perm+0x6a/0x5d0 [ 3480.519871][T20849] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3480.524801][T20849] ? vfs_write+0x9ec/0x1110 [ 3480.529145][T20849] kernel_clone+0x21e/0x9e0 [ 3480.533480][T20849] ? file_end_write+0x1c0/0x1c0 [ 3480.538167][T20849] ? create_io_thread+0x1e0/0x1e0 [ 3480.543028][T20849] ? mutex_unlock+0xb2/0x260 [ 3480.547540][T20849] ? __mutex_lock_slowpath+0x10/0x10 [ 3480.552663][T20849] __x64_sys_clone+0x23f/0x290 [ 3480.557261][T20849] ? __do_sys_vfork+0x130/0x130 [ 3480.561952][T20849] ? ksys_write+0x260/0x2c0 [ 3480.566290][T20849] ? debug_smp_processor_id+0x17/0x20 [ 3480.571507][T20849] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3480.577406][T20849] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3480.582932][T20849] do_syscall_64+0x3d/0xb0 [ 3480.589059][T20849] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3480.595038][T20849] RIP: 0033:0x7ff3418cfda9 [ 3480.599303][T20849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3480.619087][T20849] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3480.627409][T20849] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3480.635655][T20849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:37 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x5100}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x80000000c8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14f2f7ff0080679f3ea2", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 13:14:37 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x7200}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) [ 3480.643562][T20849] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3480.651367][T20849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3480.659176][T20849] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3480.667367][T20849] 13:14:37 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xd6, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000480), 0x8, 0x17, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r1, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000d40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x8, &(0x7f0000000b80)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], &(0x7f0000000c00)='GPL\x00', 0x40, 0x3b, &(0x7f0000000c40)=""/59, 0x41000, 0x28, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)=[r7, r4], &(0x7f0000001080)=[{0x0, 0x3, 0x6, 0x7}, {0x0, 0x2, 0x8, 0x2}, {0x3, 0x1, 0xb, 0x5}, {0x3, 0x3, 0xb, 0xc}, {0x2, 0x5, 0x8, 0x1}, {0x2, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x10, 0x8}, {0x0, 0x4, 0xf}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x1000}, 0x90) (async) sendmsg$unix(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="99bb02fd146546eb847ca938d9085e00c22da06463268f47dd28f8c36c09797021279e21e592f8beac71eeb3be14276afccb7f2e3d25e512f705df3af6108d6ab792899882501ee9c9ce0c1979f3d48c9e5d0d91713d18551db0bece9d878d17b0984a05ff22a1", 0x67}, {&(0x7f0000000980)="6022d8f4361fc1a78a0bf5e091b5679a21c2fa4f8021476add67a3b8ee3e700de77f9c7198d253e6294e0d14628b580ccd81690052865e694259ac9526153f07c68e43671107b8235237d27bf39d49ed83721f8da68d73ca50fd227bc75397de52dc2459ee62296c7f0fbd502ec043a6ce49181a69893312347248f03b96aad19839189e4a3b26e7058c20ea41323e2b6258feeee9f754eb0d7eb3fd8991ca553ef8cd484c5a1dbc06140ec3128371f8ed56566666fa7793316dab779ab3", 0xbe}, {&(0x7f0000000a40)="b7e9f3f2d9e8b87325710b7a6c03a0d91968769b0235aa2c0d1e79e751abbbaa0075e35d82327d64eb9bddf239c37f82acbdf5dd1a5f78447d0f8f387bf5fe8fe3161dabdf8bfc52b47765334fd7448b4412b3d7284104c02a3554572729c893044085818e55dcccd2fc0d108c62a2f0177d9980e8b0e5470b9bdf1df3978067125628ca4be6233473d200580931", 0x8e}], 0x3, 0x0, 0x0, 0x24040000}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000b0010000000000000100000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018000000670e00000000000007000000810500015f0fffff15128000fcffffff1859000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x2a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x5, 0x8000, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r0, r0, r0], &(0x7f0000000780)=[{0x2, 0x1, 0xe, 0xb}, {0x3, 0x1, 0xb, 0xa}, {0x3, 0x2, 0x10, 0x1}, {0x0, 0x2, 0xc, 0xa}, {0x4, 0x2, 0x6, 0xb}, {0x5, 0x2, 0x10, 0x9}, {0x0, 0x1, 0x9, 0x4}], 0x10, 0x49cab495}, 0x90) 13:14:37 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x5403}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x80000000c8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14f2f7ff0080679f3ea2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14f2f7ff0080679f3ea2", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 13:14:37 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x7800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3480.737279][T20882] FAULT_INJECTION: forcing a failure. [ 3480.737279][T20882] name failslab, interval 1, probability 0, space 0, times 0 [ 3480.757561][T20882] CPU: 0 PID: 20882 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3480.767732][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3480.777749][T20882] Call Trace: [ 3480.780863][T20882] [ 3480.783632][T20882] dump_stack_lvl+0x151/0x1b7 [ 3480.788144][T20882] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3480.793787][T20882] dump_stack+0x15/0x17 [ 3480.797801][T20882] should_fail+0x3c6/0x510 [ 3480.802117][T20882] __should_failslab+0xa4/0xe0 [ 3480.806717][T20882] ? vm_area_dup+0x26/0x230 [ 3480.811068][T20882] should_failslab+0x9/0x20 [ 3480.815485][T20882] slab_pre_alloc_hook+0x37/0xd0 [ 3480.820628][T20882] ? vm_area_dup+0x26/0x230 [ 3480.824943][T20882] kmem_cache_alloc+0x44/0x200 [ 3480.829553][T20882] vm_area_dup+0x26/0x230 [ 3480.833708][T20882] copy_mm+0x9a1/0x13e0 [ 3480.837703][T20882] ? copy_signal+0x610/0x610 [ 3480.842125][T20882] ? __init_rwsem+0xd6/0x1c0 [ 3480.846553][T20882] ? copy_signal+0x4e3/0x610 [ 3480.851154][T20882] copy_process+0x1149/0x3290 [ 3480.855667][T20882] ? proc_fail_nth_write+0x20b/0x290 [ 3480.860788][T20882] ? fsnotify_perm+0x6a/0x5d0 [ 3480.865308][T20882] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3480.870248][T20882] ? vfs_write+0x9ec/0x1110 [ 3480.874676][T20882] kernel_clone+0x21e/0x9e0 [ 3480.879198][T20882] ? file_end_write+0x1c0/0x1c0 [ 3480.883876][T20882] ? create_io_thread+0x1e0/0x1e0 [ 3480.888916][T20882] ? mutex_unlock+0xb2/0x260 [ 3480.893423][T20882] ? __mutex_lock_slowpath+0x10/0x10 [ 3480.898596][T20882] __x64_sys_clone+0x23f/0x290 [ 3480.903148][T20882] ? __do_sys_vfork+0x130/0x130 [ 3480.907842][T20882] ? ksys_write+0x260/0x2c0 [ 3480.912187][T20882] ? debug_smp_processor_id+0x17/0x20 [ 3480.917377][T20882] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3480.923280][T20882] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3480.928746][T20882] do_syscall_64+0x3d/0xb0 [ 3480.932998][T20882] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3480.938727][T20882] RIP: 0033:0x7ff3418cfda9 [ 3480.942986][T20882] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3480.962681][T20882] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3480.970933][T20882] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3480.978737][T20882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:37 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) 13:14:37 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) 13:14:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) [ 3480.986558][T20882] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3480.994357][T20882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3481.002177][T20882] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3481.009995][T20882] 13:14:37 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x5800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:37 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x7802}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:37 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x5f00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:37 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) ioctl$TUNSETPERSIST(r2, 0x800c6613, 0xfffffffffffffffe) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000005000000000000000000000005b1a0ff0000ffff85000000000000001800000000000080000000007e634c7c186000000000000000000000ffffffff8500000023000000db66000001000000185d00000000000000002f70c1878496d0710000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x18, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[0x0], 0x0, 0x8, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000240), 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r2}, &(0x7f0000000dc0), &(0x7f0000000e00)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xde5, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0xf, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4e4f}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x7, 0x800, 0x8}, 0x10, 0x21c3a, 0xffffffffffffffff, 0x3, &(0x7f0000000e80)=[r4, r5, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x1, 0x5, 0x0, 0x3}, {0x0, 0x3, 0x8, 0x8}, {0x3, 0x2, 0x5, 0x2}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x8b) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1d, &(0x7f0000000c80)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x2, 0x6, 0x1, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @snprintf, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x6491, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xfffffffd, 0x1000}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0xff, 0xcf, &(0x7f0000000600)=""/207, 0x41000, 0x8, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r4, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4faacc}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd5}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x26, &(0x7f0000000a80)=""/38, 0x41000, 0x2, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x4, 0x5}, 0x10, 0x0, r3, 0x8, &(0x7f00000010c0)=[r4, r5, r7], &(0x7f0000001100)=[{0x1, 0x2, 0xc, 0x7}, {0x4, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xe}, {0x1, 0x5, 0x1, 0xa}, {0x2, 0x4, 0x8, 0x8}, {0x1, 0x3, 0xe}, {0x1, 0x1, 0xc, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x47df1fa6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x3, 0x6, 0xc2, 0x0, 0x3, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x100000000}, 0x100004, 0x80000001, 0x6102280d, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x8887}, r5, 0xffffffffffffffff, r6, 0x5) [ 3481.067916][T20908] FAULT_INJECTION: forcing a failure. [ 3481.067916][T20908] name failslab, interval 1, probability 0, space 0, times 0 [ 3481.089563][T20908] CPU: 0 PID: 20908 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3481.099732][T20908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3481.109819][T20908] Call Trace: [ 3481.112929][T20908] [ 3481.115727][T20908] dump_stack_lvl+0x151/0x1b7 [ 3481.120236][T20908] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3481.125685][T20908] dump_stack+0x15/0x17 [ 3481.129706][T20908] should_fail+0x3c6/0x510 [ 3481.133940][T20908] __should_failslab+0xa4/0xe0 [ 3481.138533][T20908] ? vm_area_dup+0x26/0x230 [ 3481.142884][T20908] should_failslab+0x9/0x20 [ 3481.147232][T20908] slab_pre_alloc_hook+0x37/0xd0 [ 3481.151983][T20908] ? vm_area_dup+0x26/0x230 [ 3481.156321][T20908] kmem_cache_alloc+0x44/0x200 [ 3481.160928][T20908] vm_area_dup+0x26/0x230 [ 3481.165096][T20908] copy_mm+0x9a1/0x13e0 [ 3481.169093][T20908] ? copy_signal+0x610/0x610 [ 3481.173509][T20908] ? __init_rwsem+0xd6/0x1c0 [ 3481.177933][T20908] ? copy_signal+0x4e3/0x610 [ 3481.182373][T20908] copy_process+0x1149/0x3290 [ 3481.186876][T20908] ? proc_fail_nth_write+0x20b/0x290 [ 3481.192001][T20908] ? fsnotify_perm+0x6a/0x5d0 [ 3481.196594][T20908] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3481.201644][T20908] ? vfs_write+0x9ec/0x1110 [ 3481.206050][T20908] kernel_clone+0x21e/0x9e0 [ 3481.210321][T20908] ? file_end_write+0x1c0/0x1c0 [ 3481.214994][T20908] ? create_io_thread+0x1e0/0x1e0 [ 3481.219939][T20908] ? mutex_unlock+0xb2/0x260 [ 3481.224388][T20908] ? __mutex_lock_slowpath+0x10/0x10 [ 3481.229595][T20908] __x64_sys_clone+0x23f/0x290 [ 3481.234173][T20908] ? __do_sys_vfork+0x130/0x130 [ 3481.238866][T20908] ? ksys_write+0x260/0x2c0 [ 3481.243377][T20908] ? debug_smp_processor_id+0x17/0x20 [ 3481.248587][T20908] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3481.254482][T20908] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3481.260037][T20908] do_syscall_64+0x3d/0xb0 [ 3481.264307][T20908] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3481.270045][T20908] RIP: 0033:0x7ff3418cfda9 [ 3481.274271][T20908] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3481.293723][T20908] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3481.301980][T20908] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3481.309769][T20908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:37 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:37 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) 13:14:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 13:14:37 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x6000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3481.317580][T20908] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3481.325405][T20908] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3481.333808][T20908] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3481.341624][T20908] [ 3481.377864][T20920] FAULT_INJECTION: forcing a failure. [ 3481.377864][T20920] name failslab, interval 1, probability 0, space 0, times 0 [ 3481.394672][T20920] CPU: 1 PID: 20920 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3481.404834][T20920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3481.414729][T20920] Call Trace: [ 3481.417854][T20920] [ 3481.420628][T20920] dump_stack_lvl+0x151/0x1b7 [ 3481.425408][T20920] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3481.430863][T20920] dump_stack+0x15/0x17 [ 3481.434956][T20920] should_fail+0x3c6/0x510 [ 3481.439208][T20920] __should_failslab+0xa4/0xe0 [ 3481.443990][T20920] ? vm_area_dup+0x26/0x230 [ 3481.448318][T20920] should_failslab+0x9/0x20 [ 3481.453010][T20920] slab_pre_alloc_hook+0x37/0xd0 [ 3481.457779][T20920] ? vm_area_dup+0x26/0x230 [ 3481.462107][T20920] kmem_cache_alloc+0x44/0x200 [ 3481.466794][T20920] vm_area_dup+0x26/0x230 [ 3481.470959][T20920] copy_mm+0x9a1/0x13e0 [ 3481.474962][T20920] ? copy_signal+0x610/0x610 [ 3481.479394][T20920] ? __init_rwsem+0xd6/0x1c0 [ 3481.483815][T20920] ? copy_signal+0x4e3/0x610 [ 3481.488236][T20920] copy_process+0x1149/0x3290 [ 3481.492747][T20920] ? proc_fail_nth_write+0x20b/0x290 [ 3481.497872][T20920] ? fsnotify_perm+0x6a/0x5d0 [ 3481.502639][T20920] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3481.507649][T20920] ? vfs_write+0x9ec/0x1110 [ 3481.511974][T20920] kernel_clone+0x21e/0x9e0 [ 3481.516315][T20920] ? file_end_write+0x1c0/0x1c0 [ 3481.521001][T20920] ? create_io_thread+0x1e0/0x1e0 [ 3481.525858][T20920] ? mutex_unlock+0xb2/0x260 [ 3481.530298][T20920] ? __mutex_lock_slowpath+0x10/0x10 [ 3481.535413][T20920] __x64_sys_clone+0x23f/0x290 [ 3481.540025][T20920] ? __do_sys_vfork+0x130/0x130 [ 3481.544709][T20920] ? ksys_write+0x260/0x2c0 [ 3481.549042][T20920] ? debug_smp_processor_id+0x17/0x20 [ 3481.554257][T20920] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3481.560153][T20920] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3481.565631][T20920] do_syscall_64+0x3d/0xb0 [ 3481.569871][T20920] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3481.575592][T20920] RIP: 0033:0x7ff3418cfda9 [ 3481.579940][T20920] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3481.599717][T20920] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3481.608235][T20920] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3481.616032][T20920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x6, 0x14, 0x0, 0x0, 0x4, 0x16410, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x43}, 0x2, 0xc8, 0x7, 0x0, 0xfffffffffffff001, 0x82, 0x7, 0x0, 0x2, 0x0, 0x8}, r2, 0x10, r1, 0x1) 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x9501}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xa000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3481.624039][T20920] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3481.631830][T20920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3481.639740][T20920] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3481.647555][T20920] 13:14:38 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x6503}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xa100}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x6, 0x14, 0x0, 0x0, 0x4, 0x16410, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x43}, 0x2, 0xc8, 0x7, 0x0, 0xfffffffffffff001, 0x82, 0x7, 0x0, 0x2, 0x0, 0x8}, r2, 0x10, r1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x6, 0x14, 0x0, 0x0, 0x4, 0x16410, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x43}, 0x2, 0xc8, 0x7, 0x0, 0xfffffffffffff001, 0x82, 0x7, 0x0, 0x2, 0x0, 0x8}, r2, 0x10, r1, 0x1) (async) 13:14:38 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x6800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x6, 0x14, 0x0, 0x0, 0x4, 0x16410, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x43}, 0x2, 0xc8, 0x7, 0x0, 0xfffffffffffff001, 0x82, 0x7, 0x0, 0x2, 0x0, 0x8}, r2, 0x10, r1, 0x1) [ 3481.737382][T20935] FAULT_INJECTION: forcing a failure. [ 3481.737382][T20935] name failslab, interval 1, probability 0, space 0, times 0 [ 3481.782894][T20935] CPU: 1 PID: 20935 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3481.793240][T20935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3481.803318][T20935] Call Trace: [ 3481.806451][T20935] [ 3481.809225][T20935] dump_stack_lvl+0x151/0x1b7 [ 3481.813845][T20935] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3481.819322][T20935] dump_stack+0x15/0x17 [ 3481.823430][T20935] should_fail+0x3c6/0x510 [ 3481.827779][T20935] __should_failslab+0xa4/0xe0 [ 3481.832408][T20935] ? anon_vma_clone+0x9a/0x500 [ 3481.836973][T20935] should_failslab+0x9/0x20 [ 3481.841313][T20935] slab_pre_alloc_hook+0x37/0xd0 [ 3481.846087][T20935] ? anon_vma_clone+0x9a/0x500 [ 3481.850776][T20935] kmem_cache_alloc+0x44/0x200 [ 3481.855377][T20935] anon_vma_clone+0x9a/0x500 [ 3481.859803][T20935] anon_vma_fork+0x91/0x4e0 [ 3481.864156][T20935] ? anon_vma_name+0x43/0x70 [ 3481.868655][T20935] ? vm_area_dup+0x17a/0x230 [ 3481.873081][T20935] copy_mm+0xa3a/0x13e0 [ 3481.877077][T20935] ? copy_signal+0x610/0x610 [ 3481.881500][T20935] ? __init_rwsem+0xd6/0x1c0 [ 3481.885941][T20935] ? copy_signal+0x4e3/0x610 [ 3481.890582][T20935] copy_process+0x1149/0x3290 [ 3481.895048][T20935] ? proc_fail_nth_write+0x20b/0x290 [ 3481.900175][T20935] ? fsnotify_perm+0x6a/0x5d0 [ 3481.904680][T20935] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3481.909636][T20935] ? vfs_write+0x9ec/0x1110 [ 3481.913968][T20935] kernel_clone+0x21e/0x9e0 [ 3481.918312][T20935] ? file_end_write+0x1c0/0x1c0 [ 3481.923084][T20935] ? create_io_thread+0x1e0/0x1e0 [ 3481.928032][T20935] ? mutex_unlock+0xb2/0x260 [ 3481.932452][T20935] ? __mutex_lock_slowpath+0x10/0x10 [ 3481.937578][T20935] __x64_sys_clone+0x23f/0x290 [ 3481.942174][T20935] ? __do_sys_vfork+0x130/0x130 [ 3481.946857][T20935] ? ksys_write+0x260/0x2c0 [ 3481.951206][T20935] ? debug_smp_processor_id+0x17/0x20 [ 3481.956406][T20935] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3481.962409][T20935] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3481.967875][T20935] do_syscall_64+0x3d/0xb0 [ 3481.972125][T20935] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3481.977855][T20935] RIP: 0033:0x7ff3418cfda9 [ 3481.982113][T20935] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3482.001551][T20935] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3482.009793][T20935] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3482.017900][T20935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3482.025734][T20935] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 13:14:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) ioctl$TUNSETPERSIST(r2, 0x800c6613, 0xfffffffffffffffe) (async) ioctl$TUNSETPERSIST(r2, 0x800c6613, 0xfffffffffffffffe) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000005000000000000000000000005b1a0ff0000ffff85000000000000001800000000000080000000007e634c7c186000000000000000000000ffffffff8500000023000000db66000001000000185d00000000000000002f70c1878496d0710000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x18, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[0x0], 0x0, 0x8, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[0x0], 0x0, 0x8, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000240), 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r2}, &(0x7f0000000dc0), &(0x7f0000000e00)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r2}, &(0x7f0000000dc0), &(0x7f0000000e00)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xde5, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0xf, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4e4f}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x7, 0x800, 0x8}, 0x10, 0x21c3a, 0xffffffffffffffff, 0x3, &(0x7f0000000e80)=[r4, r5, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x1, 0x5, 0x0, 0x3}, {0x0, 0x3, 0x8, 0x8}, {0x3, 0x2, 0x5, 0x2}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1d, &(0x7f0000000c80)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x2, 0x6, 0x1, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @snprintf, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x6491, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xfffffffd, 0x1000}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1d, &(0x7f0000000c80)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x2, 0x6, 0x1, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @snprintf, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x6491, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xfffffffd, 0x1000}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0xff, 0xcf, &(0x7f0000000600)=""/207, 0x41000, 0x8, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r4}, &(0x7f0000001000), &(0x7f0000001040)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r4, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4faacc}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd5}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x26, &(0x7f0000000a80)=""/38, 0x41000, 0x2, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x4, 0x5}, 0x10, 0x0, r3, 0x8, &(0x7f00000010c0)=[r4, r5, r7], &(0x7f0000001100)=[{0x1, 0x2, 0xc, 0x7}, {0x4, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xe}, {0x1, 0x5, 0x1, 0xa}, {0x2, 0x4, 0x8, 0x8}, {0x1, 0x3, 0xe}, {0x1, 0x1, 0xc, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x47df1fa6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) (async) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x3, 0x6, 0xc2, 0x0, 0x3, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x100000000}, 0x100004, 0x80000001, 0x6102280d, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x8887}, r5, 0xffffffffffffffff, r6, 0x5) 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xa503}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001ce178df7a1e57b20b8e1608240ff76211fe01c28006aea6fe641f5464c7a8690392b44d5d50d976cc96b41973a88749d7cf08c18970afa923ca87d16214b50f64980d49fceb83fcfdc8af381c201ad2fbaeeb20fbebaac5bc2ef1fd521d7819a606bea720045f2799434523b2edece62c1c91a25f226a3f1efffcacf8babd6c44cd9fe533b0a0af507ef7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) [ 3482.033514][T20935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3482.041409][T20935] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3482.049222][T20935] 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xe100}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001ce178df7a1e57b20b8e1608240ff76211fe01c28006aea6fe641f5464c7a8690392b44d5d50d976cc96b41973a88749d7cf08c18970afa923ca87d16214b50f64980d49fceb83fcfdc8af381c201ad2fbaeeb20fbebaac5bc2ef1fd521d7819a606bea720045f2799434523b2edece62c1c91a25f226a3f1efffcacf8babd6c44cd9fe533b0a0af507ef7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:38 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x7000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3482.111948][T20960] FAULT_INJECTION: forcing a failure. [ 3482.111948][T20960] name failslab, interval 1, probability 0, space 0, times 0 13:14:38 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x7701}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001ce178df7a1e57b20b8e1608240ff76211fe01c28006aea6fe641f5464c7a8690392b44d5d50d976cc96b41973a88749d7cf08c18970afa923ca87d16214b50f64980d49fceb83fcfdc8af381c201ad2fbaeeb20fbebaac5bc2ef1fd521d7819a606bea720045f2799434523b2edece62c1c91a25f226a3f1efffcacf8babd6c44cd9fe533b0a0af507ef7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3482.197828][T20960] CPU: 0 PID: 20960 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3482.208278][T20960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3482.218260][T20960] Call Trace: [ 3482.221385][T20960] [ 3482.224158][T20960] dump_stack_lvl+0x151/0x1b7 [ 3482.228709][T20960] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3482.234147][T20960] dump_stack+0x15/0x17 [ 3482.238131][T20960] should_fail+0x3c6/0x510 [ 3482.242385][T20960] __should_failslab+0xa4/0xe0 [ 3482.246983][T20960] ? anon_vma_fork+0xf7/0x4e0 [ 3482.251495][T20960] should_failslab+0x9/0x20 [ 3482.255832][T20960] slab_pre_alloc_hook+0x37/0xd0 [ 3482.260609][T20960] ? anon_vma_fork+0xf7/0x4e0 [ 3482.265208][T20960] kmem_cache_alloc+0x44/0x200 [ 3482.270091][T20960] anon_vma_fork+0xf7/0x4e0 [ 3482.274409][T20960] ? anon_vma_name+0x43/0x70 [ 3482.278835][T20960] ? vm_area_dup+0x17a/0x230 [ 3482.283264][T20960] copy_mm+0xa3a/0x13e0 [ 3482.287262][T20960] ? copy_signal+0x610/0x610 [ 3482.291676][T20960] ? __init_rwsem+0xd6/0x1c0 [ 3482.296106][T20960] ? copy_signal+0x4e3/0x610 [ 3482.300540][T20960] copy_process+0x1149/0x3290 [ 3482.305404][T20960] ? proc_fail_nth_write+0x20b/0x290 [ 3482.310869][T20960] ? fsnotify_perm+0x6a/0x5d0 [ 3482.315382][T20960] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3482.320327][T20960] ? vfs_write+0x9ec/0x1110 [ 3482.325025][T20960] kernel_clone+0x21e/0x9e0 [ 3482.329357][T20960] ? file_end_write+0x1c0/0x1c0 [ 3482.334041][T20960] ? create_io_thread+0x1e0/0x1e0 [ 3482.338900][T20960] ? mutex_unlock+0xb2/0x260 [ 3482.343330][T20960] ? __mutex_lock_slowpath+0x10/0x10 [ 3482.348453][T20960] __x64_sys_clone+0x23f/0x290 [ 3482.353065][T20960] ? __do_sys_vfork+0x130/0x130 [ 3482.357737][T20960] ? ksys_write+0x260/0x2c0 [ 3482.362174][T20960] ? debug_smp_processor_id+0x17/0x20 [ 3482.367458][T20960] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3482.373367][T20960] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3482.378835][T20960] do_syscall_64+0x3d/0xb0 [ 3482.383086][T20960] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3482.388812][T20960] RIP: 0033:0x7ff3418cfda9 [ 3482.393065][T20960] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3482.412500][T20960] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3482.420935][T20960] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3482.428895][T20960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3482.436643][T20960] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 13:14:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) ioctl$TUNSETPERSIST(r2, 0x800c6613, 0xfffffffffffffffe) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000005000000000000000000000005b1a0ff0000ffff85000000000000001800000000000080000000007e634c7c186000000000000000000000ffffffff8500000023000000db66000001000000185d00000000000000002f70c1878496d0710000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x18, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[0x0], 0x0, 0x8, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000240), 0x12) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r2}, &(0x7f0000000dc0), &(0x7f0000000e00)='%-010d \x00'}, 0x20) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xde5, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0xf, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4e4f}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x7, 0x800, 0x8}, 0x10, 0x21c3a, 0xffffffffffffffff, 0x3, &(0x7f0000000e80)=[r4, r5, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x1, 0x5, 0x0, 0x3}, {0x0, 0x3, 0x8, 0x8}, {0x3, 0x2, 0x5, 0x2}]}, 0x90) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (rerun: 64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x8b) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r0}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1d, &(0x7f0000000c80)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x2, 0x6, 0x1, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @snprintf, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x6491, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xfffffffd, 0x1000}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0xff, 0xcf, &(0x7f0000000600)=""/207, 0x41000, 0x8, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r4, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4faacc}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd5}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x26, &(0x7f0000000a80)=""/38, 0x41000, 0x2, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x4, 0x5}, 0x10, 0x0, r3, 0x8, &(0x7f00000010c0)=[r4, r5, r7], &(0x7f0000001100)=[{0x1, 0x2, 0xc, 0x7}, {0x4, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xe}, {0x1, 0x5, 0x1, 0xa}, {0x2, 0x4, 0x8, 0x8}, {0x1, 0x3, 0xe}, {0x1, 0x1, 0xc, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x47df1fa6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x3, 0x6, 0xc2, 0x0, 0x3, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x100000000}, 0x100004, 0x80000001, 0x6102280d, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x8887}, r5, 0xffffffffffffffff, r6, 0x5) (rerun: 32) 13:14:38 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xffffffffffffffd9, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0), 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000072cf000000000000340800007fb0fcff0000000095000000000000006bd9a99a211eebacec134f2b5ba4b49400615909eb3afc099fe9b6db6a661ee8a873b7d9423366268416513df2a018bd29f33463198e6a8748"], 0x0, 0x80000001, 0x0, 0x0, 0x41000, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x1, 0x11, 0x50}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, r3]}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x4, [@datasec={0xb, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x3, 0xf0}, {0x4, 0x10001, 0xfffffffd}, {0x2, 0x8, 0x1}, {0x4, 0x101, 0x7}, {0x3, 0x5, 0xa400}], "a06e9a"}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @const={0x9, 0x0, 0x0, 0xa, 0x4}, @datasec={0xa, 0x6, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x1}, {0x3, 0x5, 0xfffffffa}, {0x3, 0xfffffff7, 0x7}, {0x1, 0x8, 0xc82b}, {0x5, 0x200, 0x67}, {0x4, 0xfff, 0x4}], "12"}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x7, 0x1}, {0x4}, {0x6, 0x2}, {0xb, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x1}, {0x2, 0x2}, {0x1, 0x3}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000900)=""/231, 0x130, 0xe7, 0x0, 0x35222479}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3c2, '\x00', r1, r4, 0x4, 0x3, 0x5}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b, r8}, 0x90) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r10, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001600), 0x0, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x10, 0x8, 0x0, &(0x7f0000001700)}}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x15, &(0x7f0000001b80)=ANY=[@ANYBLOB="be4aa1f99c8e0fff0000005e8f253076912f36152a99d927dc342f0b60776475d808000000003ed1463197509891bc4dddae618f9af8ae40222aaaabe037c3306820a016e2c730345019479e90b56f4e588cc11d029c34e1632de43e1baaac84a6b9a5151668fd317c3e0daa9e2d390bc23f6dbdeb340a5e7f637b0c84c1e82e3c1fe210b6e97b2b4a27e39b79f95689ccc325db57a4b0160c6f0d02e5efb9c1491ba1b4fb35a3f7d4c17440821b13072832e03e31c4a7603267be7fa4c30b8dabe7c9f373020ae4714adb3ea3cf8bea82b89e96962a578432b65105c7330cf1648ef9d000"/243, @ANYRES32=r10, @ANYRESOCT=r10, @ANYRES32=r13, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x1d9e3a25, 0x0, 0x0, 0x41000, 0x14, '\x00', r11, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x2, 0x94, 0xc59b}, 0x10, r12, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r13, r9, r8, 0xffffffffffffffff, r8], &(0x7f0000000a00)=[{0x0, 0x4, 0x7, 0x8}], 0x10, 0x3}, 0x90) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xd, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xba}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1}], &(0x7f0000000300)='syzkaller\x00', 0x5382, 0xd, &(0x7f0000000540)=""/13, 0x41100, 0x66, '\x00', 0x0, 0x1f, r7, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x5, 0x7fffffff, 0x9}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[r5, r5, r14, r5], &(0x7f0000000800)=[{0x2, 0x5, 0x10, 0xc}, {0x0, 0x2, 0xf, 0x6}, {0x1, 0x4, 0x10, 0x9}], 0x10, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7f}, [@map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xf0, &(0x7f0000000380)=""/240, 0x41100, 0x20, '\x00', 0x0, 0x0, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x7, 0xa7770a04, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r5, r5, r5], 0x0, 0x10, 0xadc5}, 0x90) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:38 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x7800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xe800}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3482.444526][T20960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3482.452428][T20960] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3482.460244][T20960] 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xf000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x7f03}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:38 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xf100}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3482.521556][T20989] FAULT_INJECTION: forcing a failure. [ 3482.521556][T20989] name failslab, interval 1, probability 0, space 0, times 0 [ 3482.554155][T20989] CPU: 0 PID: 20989 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3482.564327][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3482.574238][T20989] Call Trace: [ 3482.577453][T20989] [ 3482.580208][T20989] dump_stack_lvl+0x151/0x1b7 [ 3482.584719][T20989] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3482.590195][T20989] dump_stack+0x15/0x17 [ 3482.594190][T20989] should_fail+0x3c6/0x510 [ 3482.598519][T20989] __should_failslab+0xa4/0xe0 [ 3482.603120][T20989] ? anon_vma_fork+0x1df/0x4e0 [ 3482.607834][T20989] should_failslab+0x9/0x20 [ 3482.612164][T20989] slab_pre_alloc_hook+0x37/0xd0 [ 3482.616937][T20989] ? anon_vma_fork+0x1df/0x4e0 [ 3482.621536][T20989] kmem_cache_alloc+0x44/0x200 [ 3482.626329][T20989] anon_vma_fork+0x1df/0x4e0 [ 3482.632059][T20989] copy_mm+0xa3a/0x13e0 [ 3482.636041][T20989] ? copy_signal+0x610/0x610 [ 3482.640473][T20989] ? __init_rwsem+0xd6/0x1c0 [ 3482.644886][T20989] ? copy_signal+0x4e3/0x610 [ 3482.649319][T20989] copy_process+0x1149/0x3290 [ 3482.653826][T20989] ? proc_fail_nth_write+0x20b/0x290 [ 3482.659206][T20989] ? fsnotify_perm+0x6a/0x5d0 [ 3482.663725][T20989] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3482.668666][T20989] ? vfs_write+0x9ec/0x1110 [ 3482.673016][T20989] kernel_clone+0x21e/0x9e0 [ 3482.677371][T20989] ? file_end_write+0x1c0/0x1c0 [ 3482.682035][T20989] ? create_io_thread+0x1e0/0x1e0 [ 3482.686894][T20989] ? mutex_unlock+0xb2/0x260 [ 3482.691320][T20989] ? __mutex_lock_slowpath+0x10/0x10 [ 3482.696454][T20989] __x64_sys_clone+0x23f/0x290 [ 3482.701056][T20989] ? __do_sys_vfork+0x130/0x130 [ 3482.705903][T20989] ? ksys_write+0x260/0x2c0 [ 3482.710257][T20989] ? debug_smp_processor_id+0x17/0x20 [ 3482.715705][T20989] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3482.721619][T20989] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3482.727077][T20989] do_syscall_64+0x3d/0xb0 [ 3482.731331][T20989] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3482.737060][T20989] RIP: 0033:0x7ff3418cfda9 [ 3482.741313][T20989] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 13:14:39 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xff00}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3482.765286][T20989] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3482.773616][T20989] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3482.781505][T20989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3482.789316][T20989] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3482.797126][T20989] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3482.804944][T20989] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3482.812753][T20989] 13:14:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xffffffffffffffd9, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0), 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000072cf000000000000340800007fb0fcff0000000095000000000000006bd9a99a211eebacec134f2b5ba4b49400615909eb3afc099fe9b6db6a661ee8a873b7d9423366268416513df2a018bd29f33463198e6a8748"], 0x0, 0x80000001, 0x0, 0x0, 0x41000, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x1, 0x11, 0x50}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, r3]}, 0x90) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x4, [@datasec={0xb, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x3, 0xf0}, {0x4, 0x10001, 0xfffffffd}, {0x2, 0x8, 0x1}, {0x4, 0x101, 0x7}, {0x3, 0x5, 0xa400}], "a06e9a"}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @const={0x9, 0x0, 0x0, 0xa, 0x4}, @datasec={0xa, 0x6, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x1}, {0x3, 0x5, 0xfffffffa}, {0x3, 0xfffffff7, 0x7}, {0x1, 0x8, 0xc82b}, {0x5, 0x200, 0x67}, {0x4, 0xfff, 0x4}], "12"}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x7, 0x1}, {0x4}, {0x6, 0x2}, {0xb, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x1}, {0x2, 0x2}, {0x1, 0x3}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000900)=""/231, 0x130, 0xe7, 0x0, 0x35222479}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3c2, '\x00', r1, r4, 0x4, 0x3, 0x5}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b, r8}, 0x90) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r10, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001600), 0x0, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x10, 0x8, 0x0, &(0x7f0000001700)}}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x15, &(0x7f0000001b80)=ANY=[@ANYBLOB="be4aa1f99c8e0fff0000005e8f253076912f36152a99d927dc342f0b60776475d808000000003ed1463197509891bc4dddae618f9af8ae40222aaaabe037c3306820a016e2c730345019479e90b56f4e588cc11d029c34e1632de43e1baaac84a6b9a5151668fd317c3e0daa9e2d390bc23f6dbdeb340a5e7f637b0c84c1e82e3c1fe210b6e97b2b4a27e39b79f95689ccc325db57a4b0160c6f0d02e5efb9c1491ba1b4fb35a3f7d4c17440821b13072832e03e31c4a7603267be7fa4c30b8dabe7c9f373020ae4714adb3ea3cf8bea82b89e96962a578432b65105c7330cf1648ef9d000"/243, @ANYRES32=r10, @ANYRESOCT=r10, @ANYRES32=r13, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x1d9e3a25, 0x0, 0x0, 0x41000, 0x14, '\x00', r11, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x2, 0x94, 0xc59b}, 0x10, r12, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r13, r9, r8, 0xffffffffffffffff, r8], &(0x7f0000000a00)=[{0x0, 0x4, 0x7, 0x8}], 0x10, 0x3}, 0x90) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xd, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xba}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1}], &(0x7f0000000300)='syzkaller\x00', 0x5382, 0xd, &(0x7f0000000540)=""/13, 0x41100, 0x66, '\x00', 0x0, 0x1f, r7, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x5, 0x7fffffff, 0x9}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[r5, r5, r14, r5], &(0x7f0000000800)=[{0x2, 0x5, 0x10, 0xc}, {0x0, 0x2, 0xf, 0x6}, {0x1, 0x4, 0x10, 0x9}], 0x10, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7f}, [@map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xf0, &(0x7f0000000380)=""/240, 0x41100, 0x20, '\x00', 0x0, 0x0, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x7, 0xa7770a04, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r5, r5, r5], 0x0, 0x10, 0xadc5}, 0x90) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:39 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x8600}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x8800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x9003}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xffffffffffffffd9, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0), 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000072cf000000000000340800007fb0fcff0000000095000000000000006bd9a99a211eebacec134f2b5ba4b49400615909eb3afc099fe9b6db6a661ee8a873b7d9423366268416513df2a018bd29f33463198e6a8748"], 0x0, 0x80000001, 0x0, 0x0, 0x41000, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x1, 0x11, 0x50}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, r3]}, 0x90) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x4, [@datasec={0xb, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x3, 0xf0}, {0x4, 0x10001, 0xfffffffd}, {0x2, 0x8, 0x1}, {0x4, 0x101, 0x7}, {0x3, 0x5, 0xa400}], "a06e9a"}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @const={0x9, 0x0, 0x0, 0xa, 0x4}, @datasec={0xa, 0x6, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x1}, {0x3, 0x5, 0xfffffffa}, {0x3, 0xfffffff7, 0x7}, {0x1, 0x8, 0xc82b}, {0x5, 0x200, 0x67}, {0x4, 0xfff, 0x4}], "12"}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x7, 0x1}, {0x4}, {0x6, 0x2}, {0xb, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x1}, {0x2, 0x2}, {0x1, 0x3}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000900)=""/231, 0x130, 0xe7, 0x0, 0x35222479}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3c2, '\x00', r1, r4, 0x4, 0x3, 0x5}, 0x48) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b, r8}, 0x90) (async, rerun: 32) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r10, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001600), 0x0, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x10, 0x8, 0x0, &(0x7f0000001700)}}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x15, &(0x7f0000001b80)=ANY=[@ANYBLOB="be4aa1f99c8e0fff0000005e8f253076912f36152a99d927dc342f0b60776475d808000000003ed1463197509891bc4dddae618f9af8ae40222aaaabe037c3306820a016e2c730345019479e90b56f4e588cc11d029c34e1632de43e1baaac84a6b9a5151668fd317c3e0daa9e2d390bc23f6dbdeb340a5e7f637b0c84c1e82e3c1fe210b6e97b2b4a27e39b79f95689ccc325db57a4b0160c6f0d02e5efb9c1491ba1b4fb35a3f7d4c17440821b13072832e03e31c4a7603267be7fa4c30b8dabe7c9f373020ae4714adb3ea3cf8bea82b89e96962a578432b65105c7330cf1648ef9d000"/243, @ANYRES32=r10, @ANYRESOCT=r10, @ANYRES32=r13, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x1d9e3a25, 0x0, 0x0, 0x41000, 0x14, '\x00', r11, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x2, 0x94, 0xc59b}, 0x10, r12, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r13, r9, r8, 0xffffffffffffffff, r8], &(0x7f0000000a00)=[{0x0, 0x4, 0x7, 0x8}], 0x10, 0x3}, 0x90) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xd, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xba}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1}], &(0x7f0000000300)='syzkaller\x00', 0x5382, 0xd, &(0x7f0000000540)=""/13, 0x41100, 0x66, '\x00', 0x0, 0x1f, r7, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x5, 0x7fffffff, 0x9}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[r5, r5, r14, r5], &(0x7f0000000800)=[{0x2, 0x5, 0x10, 0xc}, {0x0, 0x2, 0xf, 0x6}, {0x1, 0x4, 0x10, 0x9}], 0x10, 0x80}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7f}, [@map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xf0, &(0x7f0000000380)=""/240, 0x41100, 0x20, '\x00', 0x0, 0x0, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x7, 0xa7770a04, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r5, r5, r5], 0x0, 0x10, 0xadc5}, 0x90) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 13:14:39 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x9d00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002480)={0xffffffffffffffff, 0xe0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000002200)=[0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000002280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000022c0), &(0x7f0000002300), 0x8, 0x14, 0x8, 0x8, &(0x7f0000002340)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002600)={0xffffffffffffffff, 0x20, &(0x7f00000025c0)={&(0x7f0000002540)=""/38, 0x26, 0x0, &(0x7f0000002580)=""/37, 0x25}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x13, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="085300000c000000000000000000000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000000314fcffffffffff"], &(0x7f0000002100)='syzkaller\x00', 0x7, 0x55, &(0x7f0000002140)=""/85, 0x40e00, 0x4, '\x00', r2, 0x34, 0xffffffffffffffff, 0x8, &(0x7f00000024c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002500)={0x5, 0x6, 0x1, 0x8}, 0x10, r3, r0, 0x3, &(0x7f00000026c0)=[r1, r1, r1, r0, r0, r1, r1, r4], &(0x7f0000002700)=[{0x4, 0x4, 0xf, 0x9}, {0x5, 0x2, 0x10, 0x2}, {0x2, 0x1, 0x9, 0xc}], 0x10, 0x101}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x88, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0x100, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x0, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x2, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, r0, r8, r0, r0, r9, r0, r0, r10], &(0x7f0000000880)=[{0x3, 0x2, 0xa, 0xb}, {0x4, 0x4, 0x6, 0xb}], 0x10, 0x4}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x4, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000001e40)='GPL\x00', 0x3f, 0xe7, &(0x7f0000001e80)=""/231, 0x41000, 0x19, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001f80)=[r9, r8, r9, r9], &(0x7f0000001fc0)=[{0x0, 0x5, 0xe, 0x5}, {0x4, 0x2, 0xa, 0x4}, {0x3, 0x4, 0x4, 0xb}, {0x5, 0x5, 0x10, 0x697d45f380818db2}], 0x10, 0x3}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x7f, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x4010, r11}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40286608, &(0x7f0000000040)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r12, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1, 0x1e, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x6, 0x2, 0x0, r12}, @ldst={0x2, 0x1, 0x6, 0x1, 0x1, 0x18, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0x4, 0x13, 0xfffffffffffffff8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0x1, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0x4, 0x8, 0x5, 0x0, 0x7ff}]}, &(0x7f0000000a80)='GPL\x00', 0xf9, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0xb, '\x00', r13, 0x1a, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5, 0xd, 0x4, 0x3}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)=[r10], 0x0, 0x10, 0x9}, 0x90) syz_clone(0x2b0b9400, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000000), &(0x7f0000000180)="00000000003612d8c90000645b90072ceb8da55b21e998ae316972643f49c411f0199e1ae0efc2b93cbfea8cbffeafa9b5783d21830e3e4e54e3894e32f3c8393db7b699d7f7524b6f18c8e13c81b87b3032b06ab41e44a1268a59ac022223b75d290532abee4937e0cd20b7ead5dac9455393313f2098ee60") 13:14:39 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa100}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3483.025737][T21025] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0 13:14:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002480)={0xffffffffffffffff, 0xe0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000002200)=[0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000002280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000022c0), &(0x7f0000002300), 0x8, 0x14, 0x8, 0x8, &(0x7f0000002340)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002600)={0xffffffffffffffff, 0x20, &(0x7f00000025c0)={&(0x7f0000002540)=""/38, 0x26, 0x0, &(0x7f0000002580)=""/37, 0x25}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x13, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="085300000c000000000000000000000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000000314fcffffffffff"], &(0x7f0000002100)='syzkaller\x00', 0x7, 0x55, &(0x7f0000002140)=""/85, 0x40e00, 0x4, '\x00', r2, 0x34, 0xffffffffffffffff, 0x8, &(0x7f00000024c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002500)={0x5, 0x6, 0x1, 0x8}, 0x10, r3, r0, 0x3, &(0x7f00000026c0)=[r1, r1, r1, r0, r0, r1, r1, r4], &(0x7f0000002700)=[{0x4, 0x4, 0xf, 0x9}, {0x5, 0x2, 0x10, 0x2}, {0x2, 0x1, 0x9, 0xc}], 0x10, 0x101}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x88, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0x100, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x0, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x2, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, r0, r8, r0, r0, r9, r0, r0, r10], &(0x7f0000000880)=[{0x3, 0x2, 0xa, 0xb}, {0x4, 0x4, 0x6, 0xb}], 0x10, 0x4}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x4, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000001e40)='GPL\x00', 0x3f, 0xe7, &(0x7f0000001e80)=""/231, 0x41000, 0x19, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001f80)=[r9, r8, r9, r9], &(0x7f0000001fc0)=[{0x0, 0x5, 0xe, 0x5}, {0x4, 0x2, 0xa, 0x4}, {0x3, 0x4, 0x4, 0xb}, {0x5, 0x5, 0x10, 0x697d45f380818db2}], 0x10, 0x3}, 0x90) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x7f, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x4010, r11}, 0x18) (async) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40286608, &(0x7f0000000040)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r12, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1, 0x1e, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x6, 0x2, 0x0, r12}, @ldst={0x2, 0x1, 0x6, 0x1, 0x1, 0x18, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0x4, 0x13, 0xfffffffffffffff8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0x1, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0x4, 0x8, 0x5, 0x0, 0x7ff}]}, &(0x7f0000000a80)='GPL\x00', 0xf9, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0xb, '\x00', r13, 0x1a, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5, 0xd, 0x4, 0x3}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)=[r10], 0x0, 0x10, 0x9}, 0x90) (async) syz_clone(0x2b0b9400, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000000), &(0x7f0000000180)="00000000003612d8c90000645b90072ceb8da55b21e998ae316972643f49c411f0199e1ae0efc2b93cbfea8cbffeafa9b5783d21830e3e4e54e3894e32f3c8393db7b699d7f7524b6f18c8e13c81b87b3032b06ab41e44a1268a59ac022223b75d290532abee4937e0cd20b7ead5dac9455393313f2098ee60") [ 3483.228029][T21041] FAULT_INJECTION: forcing a failure. [ 3483.228029][T21041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3483.258267][T21041] CPU: 0 PID: 21041 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3483.260435][T21050] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0 [ 3483.268433][T21041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3483.268448][T21041] Call Trace: [ 3483.268453][T21041] [ 3483.268460][T21041] dump_stack_lvl+0x151/0x1b7 [ 3483.268485][T21041] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3483.268506][T21041] dump_stack+0x15/0x17 [ 3483.268521][T21041] should_fail+0x3c6/0x510 [ 3483.310964][T21041] should_fail_alloc_page+0x5a/0x80 [ 3483.315993][T21041] prepare_alloc_pages+0x15c/0x700 [ 3483.320944][T21041] ? __alloc_pages+0x8f0/0x8f0 [ 3483.325551][T21041] ? __alloc_pages_bulk+0xe40/0xe40 [ 3483.330582][T21041] __alloc_pages+0x18c/0x8f0 [ 3483.335004][T21041] ? prep_new_page+0x110/0x110 [ 3483.339611][T21041] ? 0xffffffffa0028e18 [ 3483.346053][T21041] ? is_bpf_text_address+0x172/0x190 [ 3483.351245][T21041] pte_alloc_one+0x73/0x1b0 [ 3483.355552][T21041] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3483.360591][T21041] ? arch_stack_walk+0xf3/0x140 [ 3483.365272][T21041] __pte_alloc+0x86/0x350 [ 3483.369445][T21041] ? free_pgtables+0x280/0x280 [ 3483.374044][T21041] ? _raw_spin_lock+0xa4/0x1b0 [ 3483.378644][T21041] ? __kasan_check_write+0x14/0x20 [ 3483.383584][T21041] copy_page_range+0x28a8/0x2f90 [ 3483.388358][T21041] ? __kasan_slab_alloc+0xb1/0xe0 [ 3483.393309][T21041] ? pfn_valid+0x1e0/0x1e0 [ 3483.397563][T21041] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 3483.403111][T21041] ? __rb_insert_augmented+0x5de/0x610 [ 3483.408407][T21041] copy_mm+0xc7e/0x13e0 [ 3483.412402][T21041] ? copy_signal+0x610/0x610 [ 3483.416831][T21041] ? __init_rwsem+0xd6/0x1c0 [ 3483.421260][T21041] ? copy_signal+0x4e3/0x610 [ 3483.425678][T21041] copy_process+0x1149/0x3290 [ 3483.430191][T21041] ? proc_fail_nth_write+0x20b/0x290 [ 3483.435400][T21041] ? fsnotify_perm+0x6a/0x5d0 [ 3483.439920][T21041] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3483.445656][T21041] ? vfs_write+0x9ec/0x1110 [ 3483.451636][T21041] kernel_clone+0x21e/0x9e0 [ 3483.455967][T21041] ? file_end_write+0x1c0/0x1c0 [ 3483.460799][T21041] ? create_io_thread+0x1e0/0x1e0 [ 3483.465656][T21041] ? mutex_unlock+0xb2/0x260 [ 3483.470081][T21041] ? __mutex_lock_slowpath+0x10/0x10 [ 3483.475217][T21041] __x64_sys_clone+0x23f/0x290 [ 3483.479801][T21041] ? __do_sys_vfork+0x130/0x130 [ 3483.484488][T21041] ? ksys_write+0x260/0x2c0 [ 3483.488836][T21041] ? debug_smp_processor_id+0x17/0x20 [ 3483.494032][T21041] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3483.499951][T21041] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3483.505412][T21041] do_syscall_64+0x3d/0xb0 [ 3483.509666][T21041] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3483.515383][T21041] RIP: 0033:0x7ff3418cfda9 [ 3483.519642][T21041] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3483.539194][T21041] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3483.547439][T21041] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3483.555314][T21041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3483.563244][T21041] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3483.571054][T21041] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 13:14:39 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa402}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 13:14:40 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002480)={0xffffffffffffffff, 0xe0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000002200)=[0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000002280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000022c0), &(0x7f0000002300), 0x8, 0x14, 0x8, 0x8, &(0x7f0000002340)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002600)={0xffffffffffffffff, 0x20, &(0x7f00000025c0)={&(0x7f0000002540)=""/38, 0x26, 0x0, &(0x7f0000002580)=""/37, 0x25}}, 0x10) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x13, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="085300000c000000000000000000000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000000314fcffffffffff"], &(0x7f0000002100)='syzkaller\x00', 0x7, 0x55, &(0x7f0000002140)=""/85, 0x40e00, 0x4, '\x00', r2, 0x34, 0xffffffffffffffff, 0x8, &(0x7f00000024c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002500)={0x5, 0x6, 0x1, 0x8}, 0x10, r3, r0, 0x3, &(0x7f00000026c0)=[r1, r1, r1, r0, r0, r1, r1, r4], &(0x7f0000002700)=[{0x4, 0x4, 0xf, 0x9}, {0x5, 0x2, 0x10, 0x2}, {0x2, 0x1, 0x9, 0xc}], 0x10, 0x101}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x88, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0x100, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x0, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x2, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, r0, r8, r0, r0, r9, r0, r0, r10], &(0x7f0000000880)=[{0x3, 0x2, 0xa, 0xb}, {0x4, 0x4, 0x6, 0xb}], 0x10, 0x4}, 0x90) (async) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x4, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000001e40)='GPL\x00', 0x3f, 0xe7, &(0x7f0000001e80)=""/231, 0x41000, 0x19, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001f80)=[r9, r8, r9, r9], &(0x7f0000001fc0)=[{0x0, 0x5, 0xe, 0x5}, {0x4, 0x2, 0xa, 0x4}, {0x3, 0x4, 0x4, 0xb}, {0x5, 0x5, 0x10, 0x697d45f380818db2}], 0x10, 0x3}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x7f, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x4010, r11}, 0x18) (async) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40286608, &(0x7f0000000040)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r12, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1, 0x1e, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x6, 0x2, 0x0, r12}, @ldst={0x2, 0x1, 0x6, 0x1, 0x1, 0x18, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0x4, 0x13, 0xfffffffffffffff8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0x1, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0x4, 0x8, 0x5, 0x0, 0x7ff}]}, &(0x7f0000000a80)='GPL\x00', 0xf9, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0xb, '\x00', r13, 0x1a, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5, 0xd, 0x4, 0x3}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)=[r10], 0x0, 0x10, 0x9}, 0x90) syz_clone(0x2b0b9400, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000000), &(0x7f0000000180)="00000000003612d8c90000645b90072ceb8da55b21e998ae316972643f49c411f0199e1ae0efc2b93cbfea8cbffeafa9b5783d21830e3e4e54e3894e32f3c8393db7b699d7f7524b6f18c8e13c81b87b3032b06ab41e44a1268a59ac022223b75d290532abee4937e0cd20b7ead5dac9455393313f2098ee60") [ 3483.578873][T21041] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3483.586685][T21041] 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xb800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 4: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000240)=@framed={{}, [@map_fd={0x18, 0x88e22a1dd9030ea7, 0x1, 0x0, r0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3483.636675][T21057] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xbf03}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3483.712414][T21066] FAULT_INJECTION: forcing a failure. [ 3483.712414][T21066] name failslab, interval 1, probability 0, space 0, times 0 [ 3483.745397][T21066] CPU: 1 PID: 21066 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3483.755576][T21066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3483.765549][T21066] Call Trace: [ 3483.768677][T21066] [ 3483.771544][T21066] dump_stack_lvl+0x151/0x1b7 [ 3483.776055][T21066] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3483.781614][T21066] ? avc_denied+0x1b0/0x1b0 [ 3483.785947][T21066] dump_stack+0x15/0x17 [ 3483.789935][T21066] should_fail+0x3c6/0x510 [ 3483.794277][T21066] __should_failslab+0xa4/0xe0 [ 3483.798875][T21066] ? vm_area_dup+0x26/0x230 [ 3483.803214][T21066] should_failslab+0x9/0x20 [ 3483.807566][T21066] slab_pre_alloc_hook+0x37/0xd0 [ 3483.812767][T21066] ? vm_area_dup+0x26/0x230 [ 3483.817299][T21066] kmem_cache_alloc+0x44/0x200 [ 3483.821889][T21066] vm_area_dup+0x26/0x230 [ 3483.826262][T21066] copy_mm+0x9a1/0x13e0 [ 3483.830271][T21066] ? copy_signal+0x610/0x610 [ 3483.834689][T21066] ? __init_rwsem+0xd6/0x1c0 [ 3483.839100][T21066] ? copy_signal+0x4e3/0x610 [ 3483.843591][T21066] copy_process+0x1149/0x3290 [ 3483.848239][T21066] ? proc_fail_nth_write+0x20b/0x290 [ 3483.853468][T21066] ? fsnotify_perm+0x6a/0x5d0 [ 3483.858739][T21066] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3483.863788][T21066] ? vfs_write+0x9ec/0x1110 [ 3483.868236][T21066] kernel_clone+0x21e/0x9e0 [ 3483.872571][T21066] ? file_end_write+0x1c0/0x1c0 [ 3483.877343][T21066] ? create_io_thread+0x1e0/0x1e0 [ 3483.882211][T21066] ? mutex_unlock+0xb2/0x260 [ 3483.886635][T21066] ? __mutex_lock_slowpath+0x10/0x10 [ 3483.891760][T21066] __x64_sys_clone+0x23f/0x290 [ 3483.896353][T21066] ? __do_sys_vfork+0x130/0x130 [ 3483.901036][T21066] ? ksys_write+0x260/0x2c0 [ 3483.905378][T21066] ? debug_smp_processor_id+0x17/0x20 [ 3483.910582][T21066] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3483.916484][T21066] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3483.921952][T21066] do_syscall_64+0x3d/0xb0 [ 3483.926219][T21066] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3483.931935][T21066] RIP: 0033:0x7ff3418cfda9 [ 3483.936186][T21066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000240)=@framed={{}, [@map_fd={0x18, 0x88e22a1dd9030ea7, 0x1, 0x0, r0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xcd03}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000240)=@framed={{}, [@map_fd={0x18, 0x88e22a1dd9030ea7, 0x1, 0x0, r0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:40 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3483.956642][T21066] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3483.964863][T21066] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3483.972784][T21066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3483.980571][T21066] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3483.988642][T21066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3483.996467][T21066] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3484.004270][T21066] 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x9, 0x8, 0x2, 0xc}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ldst={0x0, 0x1, 0x3, 0x7, 0x7, 0x30, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x55, &(0x7f0000000380)=""/85, 0x41100, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x9, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[r0], &(0x7f0000000a40)=[{0x2, 0x1, 0xc, 0x7}, {0x5, 0x4, 0x1, 0xc}], 0x10, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_notify_call\x00', r1}, 0x10) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xda03}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x9, 0x8, 0x2, 0xc}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ldst={0x0, 0x1, 0x3, 0x7, 0x7, 0x30, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x55, &(0x7f0000000380)=""/85, 0x41100, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x9, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[r0], &(0x7f0000000a40)=[{0x2, 0x1, 0xc, 0x7}, {0x5, 0x4, 0x1, 0xc}], 0x10, 0x9}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_notify_call\x00', r1}, 0x10) 13:14:40 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x9, 0x8, 0x2, 0xc}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ldst={0x0, 0x1, 0x3, 0x7, 0x7, 0x30, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x55, &(0x7f0000000380)=""/85, 0x41100, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x9, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[r0], &(0x7f0000000a40)=[{0x2, 0x1, 0xc, 0x7}, {0x5, 0x4, 0x1, 0xc}], 0x10, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_notify_call\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x9, 0x8, 0x2, 0xc}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ldst={0x0, 0x1, 0x3, 0x7, 0x7, 0x30, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x55, &(0x7f0000000380)=""/85, 0x41100, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x9, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[r0], &(0x7f0000000a40)=[{0x2, 0x1, 0xc, 0x7}, {0x5, 0x4, 0x1, 0xc}], 0x10, 0x9}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_notify_call\x00', r1}, 0x10) (async) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xe100}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xe800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18ae4150cb00a04302c1e00000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x165243) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-010d \x00'}, 0x20) r7 = openat$cgroup_ro(r3, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0x11, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000b50dffff000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000200008500000083000000bf0900000000000055090100000000009500000000aa0000001825b2a35508542367d5b0a749b81534db8cb5124ebb94231487c31934df6f3da0beb3e66ca82adac60e467f0191f7a0968ea6ae7190a2db41f3ef6b0a5582fd85196ee54a3f", @ANYRES32, @ANYBLOB="0000000006000000bf91000000000000b702a00000020000008500000085d9342c45f9ffffffffffffff000000000095af13d149270354ae77a42109b359e083ac99ff755b80bbb8ed5e1c29116ef5e63d0cbed54124a20009eea3a6ad67e59a094ec0eb2f1c69fad0e94d9a06b06f1b2daaa246d3a90fbd952f3f333b53803d0c7554a372cf54e3b6c39d1d1f13afab02e1f7708dbb5e89834958a51e921f845836fe162a83e2f5a6f628fe3d9a3b90e5384de9bd2464"], &(0x7f0000000500)='syzkaller\x00', 0x176, 0xd9, &(0x7f0000000c00)=""/217, 0x40f00, 0x60, '\x00', 0x0, 0x24, r5, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x10, 0x17e5, 0x10a}, 0x10, 0x0, r2, 0x4, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r3, r3, r3, r7, 0xffffffffffffffff], &(0x7f0000000880)=[{0x1, 0x3, 0xe}, {0x2, 0x5}, {0x0, 0x2, 0xf, 0x4}, {0x5, 0x2, 0xe, 0x8}], 0x10, 0x200}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x6, 0x0, 0xd, 0x81, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0xb, 0x5, 0x8, 0xfffffffffffffffc}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x22, &(0x7f0000000080)=""/34, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[r0, r0, r0, r4, r0, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x4, 0xc, 0x5}, {0x2, 0x1, 0x9, 0x5}, {0x4, 0x3, 0x4, 0x4}], 0x10, 0x59b}, 0x90) 13:14:40 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x7}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xee03}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xf000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xf100}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xfa03}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xff00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1ac4d1}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18ae4150cb00a04302c1e00000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x165243) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-010d \x00'}, 0x20) (async) r7 = openat$cgroup_ro(r3, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0x11, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000b50dffff000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000200008500000083000000bf0900000000000055090100000000009500000000aa0000001825b2a35508542367d5b0a749b81534db8cb5124ebb94231487c31934df6f3da0beb3e66ca82adac60e467f0191f7a0968ea6ae7190a2db41f3ef6b0a5582fd85196ee54a3f", @ANYRES32, @ANYBLOB="0000000006000000bf91000000000000b702a00000020000008500000085d9342c45f9ffffffffffffff000000000095af13d149270354ae77a42109b359e083ac99ff755b80bbb8ed5e1c29116ef5e63d0cbed54124a20009eea3a6ad67e59a094ec0eb2f1c69fad0e94d9a06b06f1b2daaa246d3a90fbd952f3f333b53803d0c7554a372cf54e3b6c39d1d1f13afab02e1f7708dbb5e89834958a51e921f845836fe162a83e2f5a6f628fe3d9a3b90e5384de9bd2464"], &(0x7f0000000500)='syzkaller\x00', 0x176, 0xd9, &(0x7f0000000c00)=""/217, 0x40f00, 0x60, '\x00', 0x0, 0x24, r5, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x10, 0x17e5, 0x10a}, 0x10, 0x0, r2, 0x4, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r3, r3, r3, r7, 0xffffffffffffffff], &(0x7f0000000880)=[{0x1, 0x3, 0xe}, {0x2, 0x5}, {0x0, 0x2, 0xf, 0x4}, {0x5, 0x2, 0xe, 0x8}], 0x10, 0x200}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x6, 0x0, 0xd, 0x81, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0xb, 0x5, 0x8, 0xfffffffffffffffc}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x22, &(0x7f0000000080)=""/34, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[r0, r0, r0, r4, r0, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x4, 0xc, 0x5}, {0x2, 0x1, 0x9, 0x5}, {0x4, 0x3, 0x4, 0x4}], 0x10, 0x59b}, 0x90) 13:14:40 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x200000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xc002a0}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 13:14:40 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1010000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18ae4150cb00a04302c1e00000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x165243) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-010d \x00'}, 0x20) r7 = openat$cgroup_ro(r3, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0x11, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000b50dffff000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000200008500000083000000bf0900000000000055090100000000009500000000aa0000001825b2a35508542367d5b0a749b81534db8cb5124ebb94231487c31934df6f3da0beb3e66ca82adac60e467f0191f7a0968ea6ae7190a2db41f3ef6b0a5582fd85196ee54a3f", @ANYRES32, @ANYBLOB="0000000006000000bf91000000000000b702a00000020000008500000085d9342c45f9ffffffffffffff000000000095af13d149270354ae77a42109b359e083ac99ff755b80bbb8ed5e1c29116ef5e63d0cbed54124a20009eea3a6ad67e59a094ec0eb2f1c69fad0e94d9a06b06f1b2daaa246d3a90fbd952f3f333b53803d0c7554a372cf54e3b6c39d1d1f13afab02e1f7708dbb5e89834958a51e921f845836fe162a83e2f5a6f628fe3d9a3b90e5384de9bd2464"], &(0x7f0000000500)='syzkaller\x00', 0x176, 0xd9, &(0x7f0000000c00)=""/217, 0x40f00, 0x60, '\x00', 0x0, 0x24, r5, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x10, 0x17e5, 0x10a}, 0x10, 0x0, r2, 0x4, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r3, r3, r3, r7, 0xffffffffffffffff], &(0x7f0000000880)=[{0x1, 0x3, 0xe}, {0x2, 0x5}, {0x0, 0x2, 0xf, 0x4}, {0x5, 0x2, 0xe, 0x8}], 0x10, 0x200}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x6, 0x0, 0xd, 0x81, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0xb, 0x5, 0x8, 0xfffffffffffffffc}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x22, &(0x7f0000000080)=""/34, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[r0, r0, r0, r4, r0, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x4, 0xc, 0x5}, {0x2, 0x1, 0x9, 0x5}, {0x4, 0x3, 0x4, 0x4}], 0x10, 0x59b}, 0x90) 13:14:40 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xa}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3484.559063][T21146] FAULT_INJECTION: forcing a failure. [ 3484.559063][T21146] name failslab, interval 1, probability 0, space 0, times 0 [ 3484.604095][T21146] CPU: 1 PID: 21146 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3484.614386][T21146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3484.624506][T21146] Call Trace: [ 3484.627630][T21146] [ 3484.630502][T21146] dump_stack_lvl+0x151/0x1b7 [ 3484.635007][T21146] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3484.640483][T21146] dump_stack+0x15/0x17 [ 3484.644471][T21146] should_fail+0x3c6/0x510 [ 3484.648732][T21146] __should_failslab+0xa4/0xe0 [ 3484.653443][T21146] ? vm_area_dup+0x26/0x230 [ 3484.657773][T21146] should_failslab+0x9/0x20 [ 3484.662113][T21146] slab_pre_alloc_hook+0x37/0xd0 [ 3484.666928][T21146] ? vm_area_dup+0x26/0x230 [ 3484.671763][T21146] kmem_cache_alloc+0x44/0x200 [ 3484.677314][T21146] vm_area_dup+0x26/0x230 [ 3484.681605][T21146] copy_mm+0x9a1/0x13e0 [ 3484.688073][T21146] ? copy_signal+0x610/0x610 [ 3484.692445][T21146] ? __init_rwsem+0xd6/0x1c0 [ 3484.696862][T21146] ? copy_signal+0x4e3/0x610 [ 3484.701295][T21146] copy_process+0x1149/0x3290 [ 3484.705908][T21146] ? proc_fail_nth_write+0x20b/0x290 [ 3484.711907][T21146] ? fsnotify_perm+0x6a/0x5d0 [ 3484.716399][T21146] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3484.721352][T21146] ? vfs_write+0x9ec/0x1110 [ 3484.725773][T21146] kernel_clone+0x21e/0x9e0 [ 3484.730129][T21146] ? file_end_write+0x1c0/0x1c0 [ 3484.734821][T21146] ? create_io_thread+0x1e0/0x1e0 [ 3484.739846][T21146] ? mutex_unlock+0xb2/0x260 [ 3484.744275][T21146] ? __mutex_lock_slowpath+0x10/0x10 [ 3484.749411][T21146] __x64_sys_clone+0x23f/0x290 [ 3484.754081][T21146] ? __do_sys_vfork+0x130/0x130 [ 3484.758777][T21146] ? ksys_write+0x260/0x2c0 [ 3484.763281][T21146] ? debug_smp_processor_id+0x17/0x20 [ 3484.769003][T21146] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3484.774878][T21146] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3484.780353][T21146] do_syscall_64+0x3d/0xb0 [ 3484.786082][T21146] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3484.792078][T21146] RIP: 0033:0x7ff3418cfda9 [ 3484.796329][T21146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3484.828169][T21146] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3484.837018][T21146] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3484.849934][T21146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3484.860135][T21146] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3484.868298][T21146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3484.876449][T21146] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3484.885990][T21146] 13:14:42 executing program 4: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x2000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000deff000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:42 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xc}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000deff000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3485.927007][T21156] FAULT_INJECTION: forcing a failure. [ 3485.927007][T21156] name failslab, interval 1, probability 0, space 0, times 0 [ 3485.977403][T21156] CPU: 1 PID: 21156 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3485.987666][T21156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3485.997645][T21156] Call Trace: [ 3486.001193][T21156] [ 3486.003979][T21156] dump_stack_lvl+0x151/0x1b7 [ 3486.008580][T21156] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3486.014041][T21156] dump_stack+0x15/0x17 [ 3486.018034][T21156] should_fail+0x3c6/0x510 [ 3486.022295][T21156] __should_failslab+0xa4/0xe0 [ 3486.026894][T21156] ? vm_area_dup+0x26/0x230 [ 3486.031233][T21156] should_failslab+0x9/0x20 [ 3486.035576][T21156] slab_pre_alloc_hook+0x37/0xd0 [ 3486.040340][T21156] ? vm_area_dup+0x26/0x230 [ 3486.044679][T21156] kmem_cache_alloc+0x44/0x200 [ 3486.049329][T21156] vm_area_dup+0x26/0x230 [ 3486.053440][T21156] copy_mm+0x9a1/0x13e0 [ 3486.057435][T21156] ? copy_signal+0x610/0x610 [ 3486.061858][T21156] ? __init_rwsem+0xd6/0x1c0 [ 3486.066295][T21156] ? copy_signal+0x4e3/0x610 [ 3486.070799][T21156] copy_process+0x1149/0x3290 [ 3486.075330][T21156] ? proc_fail_nth_write+0x20b/0x290 [ 3486.080447][T21156] ? fsnotify_perm+0x6a/0x5d0 [ 3486.084948][T21156] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3486.089910][T21156] ? vfs_write+0x9ec/0x1110 [ 3486.094246][T21156] kernel_clone+0x21e/0x9e0 [ 3486.098591][T21156] ? file_end_write+0x1c0/0x1c0 [ 3486.103259][T21156] ? create_io_thread+0x1e0/0x1e0 [ 3486.108121][T21156] ? mutex_unlock+0xb2/0x260 [ 3486.112557][T21156] ? __mutex_lock_slowpath+0x10/0x10 [ 3486.117668][T21156] __x64_sys_clone+0x23f/0x290 [ 3486.122381][T21156] ? __do_sys_vfork+0x130/0x130 [ 3486.127042][T21156] ? ksys_write+0x260/0x2c0 [ 3486.131383][T21156] ? debug_smp_processor_id+0x17/0x20 [ 3486.136586][T21156] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3486.142503][T21156] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3486.147955][T21156] do_syscall_64+0x3d/0xb0 [ 3486.152209][T21156] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3486.157944][T21156] RIP: 0033:0x7ff3418cfda9 [ 3486.162194][T21156] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3486.181642][T21156] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3486.189876][T21156] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3486.197775][T21156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3486.205593][T21156] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3486.213397][T21156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 13:14:42 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x4000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3486.221420][T21156] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3486.229226][T21156] 13:14:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000deff000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x5000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x6000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xf}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='rxrpc_rx_data\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@ptr={0x1}, @fwd={0xc}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}, @fwd={0x9}]}, {0x0, [0x61, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f00000004c0)=""/135, 0x57, 0x87, 0x0, 0xfffffffa}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0xd, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x67}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x102}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9b, &(0x7f0000000380)=""/155, 0x41000, 0x40, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x5, 0x5, 0x0, 0x8}, {0x3, 0x1, 0x6}, {0x0, 0x4, 0x5, 0xe}, {0x5, 0x4, 0x9}], 0x10, 0xfffffe0c}, 0x90) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x7000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x8000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='rxrpc_rx_data\x00', r1}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@ptr={0x1}, @fwd={0xc}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}, @fwd={0x9}]}, {0x0, [0x61, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f00000004c0)=""/135, 0x57, 0x87, 0x0, 0xfffffffa}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0xd, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x67}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x102}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9b, &(0x7f0000000380)=""/155, 0x41000, 0x40, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x5, 0x5, 0x0, 0x8}, {0x3, 0x1, 0x6}, {0x0, 0x4, 0x5, 0xe}, {0x5, 0x4, 0x9}], 0x10, 0xfffffe0c}, 0x90) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x9000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x14}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='rxrpc_rx_data\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@ptr={0x1}, @fwd={0xc}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}, @fwd={0x9}]}, {0x0, [0x61, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f00000004c0)=""/135, 0x57, 0x87, 0x0, 0xfffffffa}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0xd, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x67}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x102}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9b, &(0x7f0000000380)=""/155, 0x41000, 0x40, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x5, 0x5, 0x0, 0x8}, {0x3, 0x1, 0x6}, {0x0, 0x4, 0x5, 0xe}, {0x5, 0x4, 0x9}], 0x10, 0xfffffe0c}, 0x90) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xb010000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xc000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000600000000000000fc730000090000000002000095000000cbcf440183ec47cb7c884ede5ac4cf10861bec8111e8241f9886d0a4c461727c32e1994179c545dcca70087a605663c9d3a7d9af1ed7986ee6709211223d367a50bd2deba0531ec8e8d6d7f13dc571d6d8dcc8c81452e38f93c8251f6b3be089ec3ade6bedfb"], 0x0, 0x1f, 0x93, &(0x7f0000000cc0)=""/147, 0x0, 0x2, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9}, 0x8, 0x10, 0x0, 0x0, r4}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x800, 0xdbd2, 0x200, 0x50, r0, 0x5, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0xc}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x2, &(0x7f00000008c0)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', r3, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x12000}, 0x10}, 0x90) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r5, 0x411, '\x00', 0x0, r2, 0x0, 0x3ddd7e32, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000980)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x72, &(0x7f00000007c0)=""/114, 0x41100, 0x8, '\x00', r3, 0x1b, r2, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x0, 0x80000000, 0x80000000}, 0x10, r4, 0x0, 0x0, &(0x7f0000000840)=[r7, r9], 0x0, 0x10, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x22, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xaa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x5, 0xe, 0x8, 0x3827, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x77}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000600)=""/221, 0x6a05c677cf3eec83, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[r0, r0, 0x1, r0], &(0x7f00000002c0)=[{0x1, 0x4, 0xb, 0xb}, {0x4, 0x5, 0xd, 0x5}, {0x3, 0x1, 0xa, 0x1}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x8000}, 0x90) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3486.521915][T21203] FAULT_INJECTION: forcing a failure. [ 3486.521915][T21203] name failslab, interval 1, probability 0, space 0, times 0 [ 3486.565967][T21203] CPU: 0 PID: 21203 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3486.576138][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3486.586126][T21203] Call Trace: [ 3486.589267][T21203] [ 3486.592107][T21203] dump_stack_lvl+0x151/0x1b7 [ 3486.596619][T21203] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3486.602091][T21203] dump_stack+0x15/0x17 [ 3486.606078][T21203] should_fail+0x3c6/0x510 [ 3486.610335][T21203] __should_failslab+0xa4/0xe0 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xd000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x18}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3486.614932][T21203] ? vm_area_dup+0x26/0x230 [ 3486.619283][T21203] should_failslab+0x9/0x20 [ 3486.623611][T21203] slab_pre_alloc_hook+0x37/0xd0 [ 3486.628385][T21203] ? vm_area_dup+0x26/0x230 [ 3486.632998][T21203] kmem_cache_alloc+0x44/0x200 [ 3486.637587][T21203] vm_area_dup+0x26/0x230 [ 3486.641759][T21203] copy_mm+0x9a1/0x13e0 [ 3486.645745][T21203] ? copy_signal+0x610/0x610 [ 3486.650167][T21203] ? __init_rwsem+0xd6/0x1c0 [ 3486.654604][T21203] ? copy_signal+0x4e3/0x610 [ 3486.659029][T21203] copy_process+0x1149/0x3290 [ 3486.663869][T21203] ? proc_fail_nth_write+0x20b/0x290 [ 3486.669093][T21203] ? fsnotify_perm+0x6a/0x5d0 [ 3486.673618][T21203] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3486.678561][T21203] ? vfs_write+0x9ec/0x1110 [ 3486.682902][T21203] kernel_clone+0x21e/0x9e0 [ 3486.687663][T21203] ? file_end_write+0x1c0/0x1c0 [ 3486.692358][T21203] ? create_io_thread+0x1e0/0x1e0 [ 3486.697224][T21203] ? mutex_unlock+0xb2/0x260 [ 3486.701635][T21203] ? __mutex_lock_slowpath+0x10/0x10 [ 3486.706768][T21203] __x64_sys_clone+0x23f/0x290 [ 3486.711368][T21203] ? __do_sys_vfork+0x130/0x130 [ 3486.716045][T21203] ? ksys_write+0x260/0x2c0 [ 3486.720384][T21203] ? debug_smp_processor_id+0x17/0x20 [ 3486.725598][T21203] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3486.731502][T21203] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3486.737057][T21203] do_syscall_64+0x3d/0xb0 [ 3486.741318][T21203] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3486.747044][T21203] RIP: 0033:0x7ff3418cfda9 [ 3486.751304][T21203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3486.770837][T21203] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3486.779165][T21203] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3486.787138][T21203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3486.795224][T21203] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3486.803160][T21203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xf000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000600000000000000fc730000090000000002000095000000cbcf440183ec47cb7c884ede5ac4cf10861bec8111e8241f9886d0a4c461727c32e1994179c545dcca70087a605663c9d3a7d9af1ed7986ee6709211223d367a50bd2deba0531ec8e8d6d7f13dc571d6d8dcc8c81452e38f93c8251f6b3be089ec3ade6bedfb"], 0x0, 0x1f, 0x93, &(0x7f0000000cc0)=""/147, 0x0, 0x2, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9}, 0x8, 0x10, 0x0, 0x0, r4}, 0x90) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x800, 0xdbd2, 0x200, 0x50, r0, 0x5, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0xc}, 0x48) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r7, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x2, &(0x7f00000008c0)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', r3, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x12000}, 0x10}, 0x90) (rerun: 32) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r5, 0x411, '\x00', 0x0, r2, 0x0, 0x3ddd7e32, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000980)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x72, &(0x7f00000007c0)=""/114, 0x41100, 0x8, '\x00', r3, 0x1b, r2, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x0, 0x80000000, 0x80000000}, 0x10, r4, 0x0, 0x0, &(0x7f0000000840)=[r7, r9], 0x0, 0x10, 0x2}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x22, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xaa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x5, 0xe, 0x8, 0x3827, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x77}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000600)=""/221, 0x6a05c677cf3eec83, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[r0, r0, 0x1, r0], &(0x7f00000002c0)=[{0x1, 0x4, 0xb, 0xb}, {0x4, 0x5, 0xd, 0x5}, {0x3, 0x1, 0xa, 0x1}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x8000}, 0x90) (rerun: 64) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3486.811048][T21203] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3486.818877][T21203] 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x10000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x14000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000600000000000000fc730000090000000002000095000000cbcf440183ec47cb7c884ede5ac4cf10861bec8111e8241f9886d0a4c461727c32e1994179c545dcca70087a605663c9d3a7d9af1ed7986ee6709211223d367a50bd2deba0531ec8e8d6d7f13dc571d6d8dcc8c81452e38f93c8251f6b3be089ec3ade6bedfb"], 0x0, 0x1f, 0x93, &(0x7f0000000cc0)=""/147, 0x0, 0x2, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9}, 0x8, 0x10, 0x0, 0x0, r4}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x800, 0xdbd2, 0x200, 0x50, r0, 0x5, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0xc}, 0x48) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r7, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x2, &(0x7f00000008c0)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', r3, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x12000}, 0x10}, 0x90) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r5, 0x411, '\x00', 0x0, r2, 0x0, 0x3ddd7e32, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000980)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x72, &(0x7f00000007c0)=""/114, 0x41100, 0x8, '\x00', r3, 0x1b, r2, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x0, 0x80000000, 0x80000000}, 0x10, r4, 0x0, 0x0, &(0x7f0000000840)=[r7, r9], 0x0, 0x10, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x22, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xaa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x5, 0xe, 0x8, 0x3827, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x77}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000600)=""/221, 0x6a05c677cf3eec83, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[r0, r0, 0x1, r0], &(0x7f00000002c0)=[{0x1, 0x4, 0xb, 0xb}, {0x4, 0x5, 0xd, 0x5}, {0x3, 0x1, 0xa, 0x1}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x8000}, 0x90) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x18000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8, r0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086607, &(0x7f00000005c0)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0xffffffffffffffba, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x5, 0x9, 0x5, 0x40, 0x1, 0x100, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000004085100000fdffffff95000000000000000000000000000000007d0381a6dc95d97895ede4f439e2180be940f46df6fa8e0adbb6a208cf4860bbe88e85cbee1d8b24f912fcf0362e51689f2b3e4cff3f3205ebecd22994c6fa295a218ff6e1fbffacb83a9d7ab6bf58cf86237db7a89827773c8587dc99d979e892eb34813c0f3b7d8ebfa9805a82000000000000000000000000070000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x10, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r6, r4], 0x0, 0x10, 0x1}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0xd, 0x2, 0x0, 0x5, 0x0, 0x3f, [{0x9, 0x1, 0x4}, {0x3, 0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x61, 0x2e]}}, &(0x7f00000007c0)=""/188, 0x63, 0xbc, 0x1, 0x61b}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f0000000940)=""/22, 0x16, 0x0, &(0x7f0000000980)=""/230, 0xe6}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x18, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000800000000000000040000000182a0000", @ANYRES32, @ANYBLOB="000000000004000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000020000001800000008000000000000000000010018210000", @ANYRES32=r1, @ANYBLOB="0002000007000000ffff06fff1e9c47cda557325164a59dbd0e8cde33d98", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x3421535b, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x6, r7, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x0, 0x8001, 0x8}, 0x10, r8, 0xffffffffffffffff, 0xa, &(0x7f0000000b40)=[r9], &(0x7f0000000b80)=[{0x5, 0x5, 0x3, 0x2}, {0x0, 0x4, 0xe}, {0x1, 0x3, 0x8, 0x4}, {0x5, 0x4, 0xd}, {0x1, 0x1, 0xf, 0x6}, {0x3, 0x5, 0x9, 0xc}, {0x5, 0x4, 0xd, 0x2}, {0x5, 0x2, 0xf, 0x8}, {0x2, 0x5, 0x5, 0x8}, {0x4, 0x3, 0x10, 0x1}], 0x10, 0x1}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(0xffffffffffffffff, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x70) r11 = syz_clone(0x9eb5aed2959225a7, &(0x7f0000001a00)="30091f6611f9987296870eed65015275facd24ac1cac3859b4de54df35a8968b364d58c787348c", 0x25, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000000e40)="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") recvmsg$unix(r10, &(0x7f00000003c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/14, 0xe}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="001f000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x50}, 0x10003) openat$cgroup_int(r13, &(0x7f0000000440)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x40, 0x2, 0x9, 0xcf, 0x0, 0xa4, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd1, 0x400000}, 0xa2a4, 0x6, 0xef86, 0x1, 0x100, 0x1f, 0x3, 0x0, 0x7, 0x0, 0xfffffffffffff732}, r11, 0x4, r12, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x0, &(0x7f00000006c0), &(0x7f0000000f40)='syzkaller\x00', 0xfffffb61, 0xc3, &(0x7f0000000f80)=""/195, 0x41100, 0x0, '\x00', r5, 0x0, r12, 0x8, &(0x7f0000001080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0xd, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001100)=[{0x3, 0x5, 0x8, 0xc}, {0x5, 0x1, 0x3, 0x2}, {0x3, 0x1, 0x7, 0xc}, {0x0, 0x5, 0x9, 0x9}, {0x4, 0x3, 0x6, 0x1}, {0x3, 0x4, 0xc}], 0x10, 0x200}, 0x90) 13:14:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x18010000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x23, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='tcp_probe\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x7f, 0x3, 0x81, 0x0, 0x98, 0x42200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x77c53714, 0x2, @perf_config_ext={0x1, 0x3}, 0x1051, 0xc0000, 0x401, 0x6, 0x3, 0x8d21, 0xffff, 0x0, 0x4e, 0x0, 0xbc}, 0xffffffffffffffff, 0x2, r2, 0x1) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xe5, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='syzkaller\x00', 0x81, 0xfb, &(0x7f0000000240)=""/251, 0x40f00, 0x8, '\x00', r3, 0x24, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r1, 0x0, &(0x7f0000000c00)=[r0, r0, r0, r0, r0, r6], 0x0, 0x10, 0x1}, 0x90) 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x19000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3487.100284][T21231] FAULT_INJECTION: forcing a failure. [ 3487.100284][T21231] name failslab, interval 1, probability 0, space 0, times 0 [ 3487.146259][T21231] CPU: 1 PID: 21231 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3487.156519][T21231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3487.169158][T21231] Call Trace: [ 3487.172274][T21231] [ 3487.175063][T21231] dump_stack_lvl+0x151/0x1b7 [ 3487.181417][T21231] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3487.188661][T21231] dump_stack+0x15/0x17 [ 3487.193362][T21231] should_fail+0x3c6/0x510 [ 3487.197773][T21231] __should_failslab+0xa4/0xe0 [ 3487.205491][T21231] ? vm_area_dup+0x26/0x230 [ 3487.210634][T21231] should_failslab+0x9/0x20 [ 3487.215539][T21231] slab_pre_alloc_hook+0x37/0xd0 [ 3487.223474][T21231] ? vm_area_dup+0x26/0x230 [ 3487.229954][T21231] kmem_cache_alloc+0x44/0x200 [ 3487.235861][T21231] vm_area_dup+0x26/0x230 [ 3487.245334][T21231] copy_mm+0x9a1/0x13e0 [ 3487.250204][T21231] ? copy_signal+0x610/0x610 [ 3487.257066][T21231] ? __init_rwsem+0xd6/0x1c0 [ 3487.261734][T21231] ? copy_signal+0x4e3/0x610 [ 3487.268333][T21231] copy_process+0x1149/0x3290 [ 3487.274287][T21231] ? proc_fail_nth_write+0x20b/0x290 [ 3487.280062][T21231] ? fsnotify_perm+0x6a/0x5d0 [ 3487.285773][T21231] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3487.291285][T21231] ? vfs_write+0x9ec/0x1110 [ 3487.298703][T21231] kernel_clone+0x21e/0x9e0 [ 3487.305363][T21231] ? file_end_write+0x1c0/0x1c0 [ 3487.313175][T21231] ? create_io_thread+0x1e0/0x1e0 [ 3487.320074][T21231] ? mutex_unlock+0xb2/0x260 [ 3487.329067][T21231] ? __mutex_lock_slowpath+0x10/0x10 [ 3487.334867][T21231] __x64_sys_clone+0x23f/0x290 [ 3487.339649][T21231] ? __do_sys_vfork+0x130/0x130 [ 3487.346500][T21231] ? ksys_write+0x260/0x2c0 [ 3487.350946][T21231] ? debug_smp_processor_id+0x17/0x20 [ 3487.356486][T21231] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3487.362489][T21231] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3487.369214][T21231] do_syscall_64+0x3d/0xb0 [ 3487.373462][T21231] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3487.380162][T21231] RIP: 0033:0x7ff3418cfda9 [ 3487.386650][T21231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3487.408927][T21231] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3487.418141][T21231] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3487.428278][T21231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3487.436081][T21231] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 13:14:43 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1b}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x23, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='tcp_probe\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x7f, 0x3, 0x81, 0x0, 0x98, 0x42200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x77c53714, 0x2, @perf_config_ext={0x1, 0x3}, 0x1051, 0xc0000, 0x401, 0x6, 0x3, 0x8d21, 0xffff, 0x0, 0x4e, 0x0, 0xbc}, 0xffffffffffffffff, 0x2, r2, 0x1) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xe5, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='syzkaller\x00', 0x81, 0xfb, &(0x7f0000000240)=""/251, 0x40f00, 0x8, '\x00', r3, 0x24, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r1, 0x0, &(0x7f0000000c00)=[r0, r0, r0, r0, r0, r6], 0x0, 0x10, 0x1}, 0x90) [ 3487.443893][T21231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3487.451702][T21231] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3487.459604][T21231] 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1b000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1c000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x23, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='tcp_probe\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x7f, 0x3, 0x81, 0x0, 0x98, 0x42200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x77c53714, 0x2, @perf_config_ext={0x1, 0x3}, 0x1051, 0xc0000, 0x401, 0x6, 0x3, 0x8d21, 0xffff, 0x0, 0x4e, 0x0, 0xbc}, 0xffffffffffffffff, 0x2, r2, 0x1) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xe5, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='syzkaller\x00', 0x81, 0xfb, &(0x7f0000000240)=""/251, 0x40f00, 0x8, '\x00', r3, 0x24, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r1, 0x0, &(0x7f0000000c00)=[r0, r0, r0, r0, r0, r6], 0x0, 0x10, 0x1}, 0x90) 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1fffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x20000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:43 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1c}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x28000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3487.572409][T21257] EXT4-fs warning (device sda1): ext4_group_extend:1815: can't shrink FS - resize aborted 13:14:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x800043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000780)=r1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1, 0x0}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x1c, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9511}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x9, 0x61, &(0x7f0000000ac0)=""/97, 0x41100, 0x14, '\x00', 0x0, 0x3, r1, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x1, 0x2, 0x721c}, 0x10, r4, r2, 0xa, &(0x7f0000001c80)=[r2, r5, r2], &(0x7f0000001cc0)=[{0x0, 0x3, 0xd, 0xc}, {0x1, 0x3, 0xb, 0x1}, {0x2, 0x5, 0xe, 0x1}, {0x1, 0x4, 0x0, 0x1}, {0x4, 0x4, 0xa, 0x1}, {0x4, 0x2, 0x10, 0x9}, {0x0, 0x3, 0x3, 0x5}, {0x0, 0x2, 0x0, 0xb}, {0x5, 0x5, 0x9, 0x3}, {0x2, 0x4, 0x8, 0x18f32b298f14e089}], 0x10, 0x4}, 0x90) openat$cgroup_ro(r1, &(0x7f0000001d80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x9, 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000006000000ffffffde0900ff00755c40000800000095000800000000007539f70d23483fa127bbb8b54fe4ec0854b621fd1d06f99b52ee8c26e007856a6f18bb9ccbe91d9d5e6c3dc305010000344079c92f9ad6b9b7d9febe8e200000000000c2dbe97e5fea2f2a8c4db2783e29748b5800000000000000009146676d8f077ffe40fd5128b98a4e63e707d7d0ff2db9f9e5d343c195b5a8eb78f5869b575759249aaaa678"], &(0x7f0000001e00)='syzkaller\x00', 0x35f7, 0x7b, &(0x7f0000001f00)=""/123, 0x40f00, 0x40, '\x00', r7, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000025c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002600)=[{0x0, 0x4, 0x9, 0x7}], 0x10, 0x4}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/244, 0xf4, 0x0, &(0x7f0000000480)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x9, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x4, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0xc, '\x00', r7, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x9}, 0x8, 0x10, 0x0, 0x46, r8, 0xffffffffffffffff, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, r3, r3, r3, r3, 0x1, r3, r3], &(0x7f0000000640)=[{0x4, 0x3, 0x9, 0x3}, {0x3, 0x2, 0x0, 0x9}, {0x1, 0x4, 0x5}], 0x10, 0x8}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009500"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x30000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x800043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000780)=r1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1, 0x0}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x1c, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9511}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x9, 0x61, &(0x7f0000000ac0)=""/97, 0x41100, 0x14, '\x00', 0x0, 0x3, r1, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x1, 0x2, 0x721c}, 0x10, r4, r2, 0xa, &(0x7f0000001c80)=[r2, r5, r2], &(0x7f0000001cc0)=[{0x0, 0x3, 0xd, 0xc}, {0x1, 0x3, 0xb, 0x1}, {0x2, 0x5, 0xe, 0x1}, {0x1, 0x4, 0x0, 0x1}, {0x4, 0x4, 0xa, 0x1}, {0x4, 0x2, 0x10, 0x9}, {0x0, 0x3, 0x3, 0x5}, {0x0, 0x2, 0x0, 0xb}, {0x5, 0x5, 0x9, 0x3}, {0x2, 0x4, 0x8, 0x18f32b298f14e089}], 0x10, 0x4}, 0x90) openat$cgroup_ro(r1, &(0x7f0000001d80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x9, 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000006000000ffffffde0900ff00755c40000800000095000800000000007539f70d23483fa127bbb8b54fe4ec0854b621fd1d06f99b52ee8c26e007856a6f18bb9ccbe91d9d5e6c3dc305010000344079c92f9ad6b9b7d9febe8e200000000000c2dbe97e5fea2f2a8c4db2783e29748b5800000000000000009146676d8f077ffe40fd5128b98a4e63e707d7d0ff2db9f9e5d343c195b5a8eb78f5869b575759249aaaa678"], &(0x7f0000001e00)='syzkaller\x00', 0x35f7, 0x7b, &(0x7f0000001f00)=""/123, 0x40f00, 0x40, '\x00', r7, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000025c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002600)=[{0x0, 0x4, 0x9, 0x7}], 0x10, 0x4}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x9, 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000006000000ffffffde0900ff00755c40000800000095000800000000007539f70d23483fa127bbb8b54fe4ec0854b621fd1d06f99b52ee8c26e007856a6f18bb9ccbe91d9d5e6c3dc305010000344079c92f9ad6b9b7d9febe8e200000000000c2dbe97e5fea2f2a8c4db2783e29748b5800000000000000009146676d8f077ffe40fd5128b98a4e63e707d7d0ff2db9f9e5d343c195b5a8eb78f5869b575759249aaaa678"], &(0x7f0000001e00)='syzkaller\x00', 0x35f7, 0x7b, &(0x7f0000001f00)=""/123, 0x40f00, 0x40, '\x00', r7, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000025c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002600)=[{0x0, 0x4, 0x9, 0x7}], 0x10, 0x4}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/244, 0xf4, 0x0, &(0x7f0000000480)=""/93, 0x5d}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/244, 0xf4, 0x0, &(0x7f0000000480)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x9, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x4, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0xc, '\x00', r7, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x9}, 0x8, 0x10, 0x0, 0x46, r8, 0xffffffffffffffff, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, r3, r3, r3, r3, 0x1, r3, r3], &(0x7f0000000640)=[{0x4, 0x3, 0x9, 0x3}, {0x3, 0x2, 0x0, 0x9}, {0x1, 0x4, 0x5}], 0x10, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009500"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009500"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x38000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x28}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x38010000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x800043, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 64) r2 = openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000780)=r1) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1, 0x0}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x1c, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9511}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x9, 0x61, &(0x7f0000000ac0)=""/97, 0x41100, 0x14, '\x00', 0x0, 0x3, r1, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x1, 0x2, 0x721c}, 0x10, r4, r2, 0xa, &(0x7f0000001c80)=[r2, r5, r2], &(0x7f0000001cc0)=[{0x0, 0x3, 0xd, 0xc}, {0x1, 0x3, 0xb, 0x1}, {0x2, 0x5, 0xe, 0x1}, {0x1, 0x4, 0x0, 0x1}, {0x4, 0x4, 0xa, 0x1}, {0x4, 0x2, 0x10, 0x9}, {0x0, 0x3, 0x3, 0x5}, {0x0, 0x2, 0x0, 0xb}, {0x5, 0x5, 0x9, 0x3}, {0x2, 0x4, 0x8, 0x18f32b298f14e089}], 0x10, 0x4}, 0x90) (async) openat$cgroup_ro(r1, &(0x7f0000001d80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x9, 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000006000000ffffffde0900ff00755c40000800000095000800000000007539f70d23483fa127bbb8b54fe4ec0854b621fd1d06f99b52ee8c26e007856a6f18bb9ccbe91d9d5e6c3dc305010000344079c92f9ad6b9b7d9febe8e200000000000c2dbe97e5fea2f2a8c4db2783e29748b5800000000000000009146676d8f077ffe40fd5128b98a4e63e707d7d0ff2db9f9e5d343c195b5a8eb78f5869b575759249aaaa678"], &(0x7f0000001e00)='syzkaller\x00', 0x35f7, 0x7b, &(0x7f0000001f00)=""/123, 0x40f00, 0x40, '\x00', r7, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000025c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002600)=[{0x0, 0x4, 0x9, 0x7}], 0x10, 0x4}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/244, 0xf4, 0x0, &(0x7f0000000480)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x9, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x4, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0xc, '\x00', r7, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x9}, 0x8, 0x10, 0x0, 0x46, r8, 0xffffffffffffffff, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, r3, r3, r3, r3, 0x1, r3, r3], &(0x7f0000000640)=[{0x4, 0x3, 0x9, 0x3}, {0x3, 0x2, 0x0, 0x9}, {0x1, 0x4, 0x5}], 0x10, 0x8}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009500"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x3f000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x30}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xa, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1f, 0x0, r0, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000821000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x40000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xa, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1f, 0x0, r0, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000821000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xa, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1f, 0x0, r0, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000821000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) [ 3487.905709][T21293] FAULT_INJECTION: forcing a failure. [ 3487.905709][T21293] name failslab, interval 1, probability 0, space 0, times 0 [ 3487.948852][T21293] CPU: 0 PID: 21293 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3487.959118][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3487.969007][T21293] Call Trace: [ 3487.972138][T21293] [ 3487.975080][T21293] dump_stack_lvl+0x151/0x1b7 [ 3487.979593][T21293] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3487.985068][T21293] dump_stack+0x15/0x17 [ 3487.989054][T21293] should_fail+0x3c6/0x510 [ 3487.993399][T21293] __should_failslab+0xa4/0xe0 [ 3487.998002][T21293] ? vm_area_dup+0x26/0x230 [ 3488.002333][T21293] should_failslab+0x9/0x20 [ 3488.006844][T21293] slab_pre_alloc_hook+0x37/0xd0 [ 3488.011651][T21293] ? vm_area_dup+0x26/0x230 [ 3488.015957][T21293] kmem_cache_alloc+0x44/0x200 [ 3488.020563][T21293] vm_area_dup+0x26/0x230 [ 3488.024722][T21293] copy_mm+0x9a1/0x13e0 [ 3488.028723][T21293] ? copy_signal+0x610/0x610 [ 3488.033143][T21293] ? __init_rwsem+0xd6/0x1c0 [ 3488.037572][T21293] ? copy_signal+0x4e3/0x610 [ 3488.041995][T21293] copy_process+0x1149/0x3290 [ 3488.046507][T21293] ? proc_fail_nth_write+0x20b/0x290 [ 3488.051649][T21293] ? fsnotify_perm+0x6a/0x5d0 [ 3488.056144][T21293] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3488.061095][T21293] ? vfs_write+0x9ec/0x1110 [ 3488.065516][T21293] kernel_clone+0x21e/0x9e0 [ 3488.070031][T21293] ? file_end_write+0x1c0/0x1c0 [ 3488.074803][T21293] ? create_io_thread+0x1e0/0x1e0 [ 3488.079688][T21293] ? mutex_unlock+0xb2/0x260 [ 3488.084096][T21293] ? __mutex_lock_slowpath+0x10/0x10 [ 3488.089216][T21293] __x64_sys_clone+0x23f/0x290 [ 3488.093813][T21293] ? __do_sys_vfork+0x130/0x130 [ 3488.098494][T21293] ? ksys_write+0x260/0x2c0 [ 3488.102838][T21293] ? debug_smp_processor_id+0x17/0x20 [ 3488.108043][T21293] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3488.113953][T21293] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3488.119412][T21293] do_syscall_64+0x3d/0xb0 [ 3488.123811][T21293] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3488.129512][T21293] RIP: 0033:0x7ff3418cfda9 [ 3488.133764][T21293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3488.153199][T21293] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3488.161440][T21293] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3488.169252][T21293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3488.177068][T21293] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3488.185056][T21293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 13:14:44 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x38}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x41000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3488.192959][T21293] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3488.200774][T21293] 13:14:44 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xa, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1f, 0x0, r0, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000821000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x49020000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum={0x1, 0x8, 0x0, 0x6, 0x4, [{0x0, 0x9}, {0xe, 0x8}, {0x8, 0x3}, {0xf, 0x4}, {0xb, 0x5}, {0x0, 0x5603cb7a}, {0xe, 0x8000}, {0x2, 0x80000000}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x0]}}, &(0x7f0000000400)=""/240, 0x75, 0xf0, 0x1, 0x10000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x14, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa82, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @generic={0x2, 0x1, 0xc, 0x401, 0x79f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x25, &(0x7f0000000300)=""/37, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xa, 0x401, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r0, 0x1, r0, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x3, 0x4}, {0x1, 0x3, 0xa, 0xb}, {0x2, 0x1, 0xb, 0x4}, {0x2, 0x4, 0xd, 0x9}, {0x2, 0x1, 0x10, 0xb}, {0x5, 0x5, 0xb, 0xb}], 0x10, 0x3ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_vmscan_lru_isolate\x00', r1}, 0x10) 13:14:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086607, &(0x7f00000005c0)=0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0xffffffffffffffba, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x5, 0x9, 0x5, 0x40, 0x1, 0x100, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000004085100000fdffffff95000000000000000000000000000000007d0381a6dc95d97895ede4f439e2180be940f46df6fa8e0adbb6a208cf4860bbe88e85cbee1d8b24f912fcf0362e51689f2b3e4cff3f3205ebecd22994c6fa295a218ff6e1fbffacb83a9d7ab6bf58cf86237db7a89827773c8587dc99d979e892eb34813c0f3b7d8ebfa9805a82000000000000000000000000070000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x10, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r6, r4], 0x0, 0x10, 0x1}, 0x90) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0xd, 0x2, 0x0, 0x5, 0x0, 0x3f, [{0x9, 0x1, 0x4}, {0x3, 0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x61, 0x2e]}}, &(0x7f00000007c0)=""/188, 0x63, 0xbc, 0x1, 0x61b}, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f0000000940)=""/22, 0x16, 0x0, &(0x7f0000000980)=""/230, 0xe6}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x18, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000800000000000000040000000182a0000", @ANYRES32, @ANYBLOB="000000000004000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000020000001800000008000000000000000000010018210000", @ANYRES32=r1, @ANYBLOB="0002000007000000ffff06fff1e9c47cda557325164a59dbd0e8cde33d98", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x3421535b, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x6, r7, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x0, 0x8001, 0x8}, 0x10, r8, 0xffffffffffffffff, 0xa, &(0x7f0000000b40)=[r9], &(0x7f0000000b80)=[{0x5, 0x5, 0x3, 0x2}, {0x0, 0x4, 0xe}, {0x1, 0x3, 0x8, 0x4}, {0x5, 0x4, 0xd}, {0x1, 0x1, 0xf, 0x6}, {0x3, 0x5, 0x9, 0xc}, {0x5, 0x4, 0xd, 0x2}, {0x5, 0x2, 0xf, 0x8}, {0x2, 0x5, 0x5, 0x8}, {0x4, 0x3, 0x10, 0x1}], 0x10, 0x1}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(0xffffffffffffffff, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x70) r11 = syz_clone(0x9eb5aed2959225a7, &(0x7f0000001a00)="30091f6611f9987296870eed65015275facd24ac1cac3859b4de54df35a8968b364d58c787348c", 0x25, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000000e40)="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") (async) recvmsg$unix(r10, &(0x7f00000003c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/14, 0xe}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="001f000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x50}, 0x10003) openat$cgroup_int(r13, &(0x7f0000000440)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x40, 0x2, 0x9, 0xcf, 0x0, 0xa4, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd1, 0x400000}, 0xa2a4, 0x6, 0xef86, 0x1, 0x100, 0x1f, 0x3, 0x0, 0x7, 0x0, 0xfffffffffffff732}, r11, 0x4, r12, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x0, &(0x7f00000006c0), &(0x7f0000000f40)='syzkaller\x00', 0xfffffb61, 0xc3, &(0x7f0000000f80)=""/195, 0x41100, 0x0, '\x00', r5, 0x0, r12, 0x8, &(0x7f0000001080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0xd, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001100)=[{0x3, 0x5, 0x8, 0xc}, {0x5, 0x1, 0x3, 0x2}, {0x3, 0x1, 0x7, 0xc}, {0x0, 0x5, 0x9, 0x9}, {0x4, 0x3, 0x6, 0x1}, {0x3, 0x4, 0xc}], 0x10, 0x200}, 0x90) 13:14:44 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x41}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x50000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 13:14:44 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum={0x1, 0x8, 0x0, 0x6, 0x4, [{0x0, 0x9}, {0xe, 0x8}, {0x8, 0x3}, {0xf, 0x4}, {0xb, 0x5}, {0x0, 0x5603cb7a}, {0xe, 0x8000}, {0x2, 0x80000000}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x0]}}, &(0x7f0000000400)=""/240, 0x75, 0xf0, 0x1, 0x10000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x14, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa82, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @generic={0x2, 0x1, 0xc, 0x401, 0x79f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x25, &(0x7f0000000300)=""/37, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xa, 0x401, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r0, 0x1, r0, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x3, 0x4}, {0x1, 0x3, 0xa, 0xb}, {0x2, 0x1, 0xb, 0x4}, {0x2, 0x4, 0xd, 0x9}, {0x2, 0x1, 0x10, 0xb}, {0x5, 0x5, 0xb, 0xb}], 0x10, 0x3ff}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_vmscan_lru_isolate\x00', r1}, 0x10) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x51000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x54030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum={0x1, 0x8, 0x0, 0x6, 0x4, [{0x0, 0x9}, {0xe, 0x8}, {0x8, 0x3}, {0xf, 0x4}, {0xb, 0x5}, {0x0, 0x5603cb7a}, {0xe, 0x8000}, {0x2, 0x80000000}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x0]}}, &(0x7f0000000400)=""/240, 0x75, 0xf0, 0x1, 0x10000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x14, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa82, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @generic={0x2, 0x1, 0xc, 0x401, 0x79f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x25, &(0x7f0000000300)=""/37, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xa, 0x401, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r0, 0x1, r0, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x3, 0x4}, {0x1, 0x3, 0xa, 0xb}, {0x2, 0x1, 0xb, 0x4}, {0x2, 0x4, 0xd, 0x9}, {0x2, 0x1, 0x10, 0xb}, {0x5, 0x5, 0xb, 0xb}], 0x10, 0x3ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_vmscan_lru_isolate\x00', r1}, 0x10) 13:14:44 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x58000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:44 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x50}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3488.458602][T21336] FAULT_INJECTION: forcing a failure. [ 3488.458602][T21336] name failslab, interval 1, probability 0, space 0, times 0 [ 3488.473676][T21336] CPU: 0 PID: 21336 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3488.484270][T21336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3488.494164][T21336] Call Trace: [ 3488.497722][T21336] [ 3488.500496][T21336] dump_stack_lvl+0x151/0x1b7 [ 3488.505012][T21336] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3488.510477][T21336] ? avc_denied+0x1b0/0x1b0 [ 3488.514819][T21336] dump_stack+0x15/0x17 [ 3488.518809][T21336] should_fail+0x3c6/0x510 [ 3488.523063][T21336] __should_failslab+0xa4/0xe0 [ 3488.527661][T21336] ? vm_area_dup+0x26/0x230 [ 3488.532011][T21336] should_failslab+0x9/0x20 [ 3488.536342][T21336] slab_pre_alloc_hook+0x37/0xd0 [ 3488.541121][T21336] ? vm_area_dup+0x26/0x230 [ 3488.545454][T21336] kmem_cache_alloc+0x44/0x200 [ 3488.550408][T21336] vm_area_dup+0x26/0x230 [ 3488.554573][T21336] copy_mm+0x9a1/0x13e0 [ 3488.558561][T21336] ? copy_signal+0x610/0x610 [ 3488.562985][T21336] ? __init_rwsem+0xd6/0x1c0 [ 3488.567414][T21336] ? copy_signal+0x4e3/0x610 [ 3488.571839][T21336] copy_process+0x1149/0x3290 [ 3488.576352][T21336] ? proc_fail_nth_write+0x20b/0x290 [ 3488.581491][T21336] ? fsnotify_perm+0x6a/0x5d0 [ 3488.586001][T21336] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3488.590934][T21336] ? vfs_write+0x9ec/0x1110 [ 3488.595390][T21336] kernel_clone+0x21e/0x9e0 [ 3488.599722][T21336] ? file_end_write+0x1c0/0x1c0 [ 3488.604406][T21336] ? create_io_thread+0x1e0/0x1e0 [ 3488.609266][T21336] ? mutex_unlock+0xb2/0x260 [ 3488.613693][T21336] ? __mutex_lock_slowpath+0x10/0x10 [ 3488.618826][T21336] __x64_sys_clone+0x23f/0x290 [ 3488.623501][T21336] ? __do_sys_vfork+0x130/0x130 [ 3488.628188][T21336] ? ksys_write+0x260/0x2c0 [ 3488.632542][T21336] ? debug_smp_processor_id+0x17/0x20 [ 3488.638090][T21336] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3488.645390][T21336] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3488.650883][T21336] do_syscall_64+0x3d/0xb0 [ 3488.655191][T21336] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3488.660917][T21336] RIP: 0033:0x7ff3418cfda9 [ 3488.665169][T21336] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3488.684616][T21336] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3488.693043][T21336] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3488.700847][T21336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000380)="db49cdca37b69d675b51636e58def5fd15b98de58ea2a25f78f2befdb21822b9d37b0ec7a377f01061f119aa625ccf4bbc4c2e28f9f70dd1c3d91286017de86c8839907a609bec9d3996553bfead603ea48ffae44a8674a1c9c9af22c04138e0f292a2564a4ff63d15676342d8b161ebbd133af705b77fee9a2d7360f490c26d1d83c2f930efda304acaaafccf0fa05df2fa06365de52db1848b944cddd04ea8cc557fd800682b5a7f8f3bada53893764ba7d12d1d2224c9abbc0eb19c9c57abb59b4d69983b8561275fe9e17cc057358a30e4eb971d0c91b6ae093efdfd815165191b8a5c22470242eb", &(0x7f0000000480)=""/222}, 0x20) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x5f000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x60000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3488.708650][T21336] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3488.716468][T21336] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3488.724891][T21336] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3488.732708][T21336] 13:14:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000380)="db49cdca37b69d675b51636e58def5fd15b98de58ea2a25f78f2befdb21822b9d37b0ec7a377f01061f119aa625ccf4bbc4c2e28f9f70dd1c3d91286017de86c8839907a609bec9d3996553bfead603ea48ffae44a8674a1c9c9af22c04138e0f292a2564a4ff63d15676342d8b161ebbd133af705b77fee9a2d7360f490c26d1d83c2f930efda304acaaafccf0fa05df2fa06365de52db1848b944cddd04ea8cc557fd800682b5a7f8f3bada53893764ba7d12d1d2224c9abbc0eb19c9c57abb59b4d69983b8561275fe9e17cc057358a30e4eb971d0c91b6ae093efdfd815165191b8a5c22470242eb", &(0x7f0000000480)=""/222}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000380)="db49cdca37b69d675b51636e58def5fd15b98de58ea2a25f78f2befdb21822b9d37b0ec7a377f01061f119aa625ccf4bbc4c2e28f9f70dd1c3d91286017de86c8839907a609bec9d3996553bfead603ea48ffae44a8674a1c9c9af22c04138e0f292a2564a4ff63d15676342d8b161ebbd133af705b77fee9a2d7360f490c26d1d83c2f930efda304acaaafccf0fa05df2fa06365de52db1848b944cddd04ea8cc557fd800682b5a7f8f3bada53893764ba7d12d1d2224c9abbc0eb19c9c57abb59b4d69983b8561275fe9e17cc057358a30e4eb971d0c91b6ae093efdfd815165191b8a5c22470242eb", &(0x7f0000000480)=""/222}, 0x20) (async) 13:14:45 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x51}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x65030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x68000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086607, &(0x7f00000005c0)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0xffffffffffffffba, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x5, 0x9, 0x5, 0x40, 0x1, 0x100, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000004085100000fdffffff95000000000000000000000000000000007d0381a6dc95d97895ede4f439e2180be940f46df6fa8e0adbb6a208cf4860bbe88e85cbee1d8b24f912fcf0362e51689f2b3e4cff3f3205ebecd22994c6fa295a218ff6e1fbffacb83a9d7ab6bf58cf86237db7a89827773c8587dc99d979e892eb34813c0f3b7d8ebfa9805a82000000000000000000000000070000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x10, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r6, r4], 0x0, 0x10, 0x1}, 0x90) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0xd, 0x2, 0x0, 0x5, 0x0, 0x3f, [{0x9, 0x1, 0x4}, {0x3, 0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x61, 0x2e]}}, &(0x7f00000007c0)=""/188, 0x63, 0xbc, 0x1, 0x61b}, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f0000000940)=""/22, 0x16, 0x0, &(0x7f0000000980)=""/230, 0xe6}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x18, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000800000000000000040000000182a0000", @ANYRES32, @ANYBLOB="000000000004000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000020000001800000008000000000000000000010018210000", @ANYRES32=r1, @ANYBLOB="0002000007000000ffff06fff1e9c47cda557325164a59dbd0e8cde33d98", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x3421535b, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x6, r7, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x0, 0x8001, 0x8}, 0x10, r8, 0xffffffffffffffff, 0xa, &(0x7f0000000b40)=[r9], &(0x7f0000000b80)=[{0x5, 0x5, 0x3, 0x2}, {0x0, 0x4, 0xe}, {0x1, 0x3, 0x8, 0x4}, {0x5, 0x4, 0xd}, {0x1, 0x1, 0xf, 0x6}, {0x3, 0x5, 0x9, 0xc}, {0x5, 0x4, 0xd, 0x2}, {0x5, 0x2, 0xf, 0x8}, {0x2, 0x5, 0x5, 0x8}, {0x4, 0x3, 0x10, 0x1}], 0x10, 0x1}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x70) r11 = syz_clone(0x9eb5aed2959225a7, &(0x7f0000001a00)="30091f6611f9987296870eed65015275facd24ac1cac3859b4de54df35a8968b364d58c787348c", 0x25, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000000e40)="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") (async) recvmsg$unix(r10, &(0x7f00000003c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/14, 0xe}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="001f000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x50}, 0x10003) openat$cgroup_int(r13, &(0x7f0000000440)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x40, 0x2, 0x9, 0xcf, 0x0, 0xa4, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd1, 0x400000}, 0xa2a4, 0x6, 0xef86, 0x1, 0x100, 0x1f, 0x3, 0x0, 0x7, 0x0, 0xfffffffffffff732}, r11, 0x4, r12, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x0, &(0x7f00000006c0), &(0x7f0000000f40)='syzkaller\x00', 0xfffffb61, 0xc3, &(0x7f0000000f80)=""/195, 0x41100, 0x0, '\x00', r5, 0x0, r12, 0x8, &(0x7f0000001080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0xd, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001100)=[{0x3, 0x5, 0x8, 0xc}, {0x5, 0x1, 0x3, 0x2}, {0x3, 0x1, 0x7, 0xc}, {0x0, 0x5, 0x9, 0x9}, {0x4, 0x3, 0x6, 0x1}, {0x3, 0x4, 0xc}], 0x10, 0x200}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x70000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x58}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000380)="db49cdca37b69d675b51636e58def5fd15b98de58ea2a25f78f2befdb21822b9d37b0ec7a377f01061f119aa625ccf4bbc4c2e28f9f70dd1c3d91286017de86c8839907a609bec9d3996553bfead603ea48ffae44a8674a1c9c9af22c04138e0f292a2564a4ff63d15676342d8b161ebbd133af705b77fee9a2d7360f490c26d1d83c2f930efda304acaaafccf0fa05df2fa06365de52db1848b944cddd04ea8cc557fd800682b5a7f8f3bada53893764ba7d12d1d2224c9abbc0eb19c9c57abb59b4d69983b8561275fe9e17cc057358a30e4eb971d0c91b6ae093efdfd815165191b8a5c22470242eb", &(0x7f0000000480)=""/222}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000380)="db49cdca37b69d675b51636e58def5fd15b98de58ea2a25f78f2befdb21822b9d37b0ec7a377f01061f119aa625ccf4bbc4c2e28f9f70dd1c3d91286017de86c8839907a609bec9d3996553bfead603ea48ffae44a8674a1c9c9af22c04138e0f292a2564a4ff63d15676342d8b161ebbd133af705b77fee9a2d7360f490c26d1d83c2f930efda304acaaafccf0fa05df2fa06365de52db1848b944cddd04ea8cc557fd800682b5a7f8f3bada53893764ba7d12d1d2224c9abbc0eb19c9c57abb59b4d69983b8561275fe9e17cc057358a30e4eb971d0c91b6ae093efdfd815165191b8a5c22470242eb", &(0x7f0000000480)=""/222}, 0x20) (async) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x77010000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x78000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="8b8bb9072df1251799a0e83800000000000010bd697ee4d28407bb9b477c4e4f0558a8650a48d81632a5b3c28d7ec062f7aee703916f3dd8428479325f0d177a8ceac3b6111cb749f49f8d3dd2c198ab26ea0de077ae3031527d087d1ffccd97e739571ad55748caca540b655559b041391421fb72cb5fe89391b0087c4902a3a26941666d53e7ed4d7a6b8629effb82a9dca27e4b79c7c868009df78c55b52d6d3b86c37c76277399ced2eb9bbcb864771404d6be"], &(0x7f0000000240)='GPL\x00'}, 0xa0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x23) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x9, 0x101, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0x1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x15, 0x14, &(0x7f00000023c0)=@raw=[@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe19}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000002480)='GPL\x00', 0x2e2, 0x0, 0x0, 0x41100, 0xc, '\x00', r5, 0x34, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000024c0)={0x1, 0xb, 0x9, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000026c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000002700)=[{0x4, 0x4, 0xb, 0xa}, {0x2, 0x0, 0x0, 0x3}], 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x9, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeceb, 0x0, 0x0, 0x0, 0x4}, [@generic={0x0, 0x0, 0xd, 0x8, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x3, &(0x7f0000000bc0)=""/3, 0x41100, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001f80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001fc0)=[r4], &(0x7f0000002000)=[{0x0, 0x1, 0xa, 0x2}, {0x1, 0x2, 0x1, 0xb}, {0x3, 0x4, 0xb, 0x6}, {0x4, 0x5, 0xc, 0x6}, {0x4, 0x0, 0x1, 0x1}], 0x10, 0x2}, 0x90) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x66, &(0x7f0000000180)=""/102, 0x40f00, 0x68, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0x8, 0x1000, 0xfffffffe}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r9, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x3f, 0x1, 0x10, 0xa}, {0x0, 0x4, 0x6, 0x7}, {0x5, 0x3, 0x6, 0xc}, {0x0, 0x2, 0x5, 0xc}], 0x10, 0x8000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:45 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x60}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x7f030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x80ffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="8b8bb9072df1251799a0e83800000000000010bd697ee4d28407bb9b477c4e4f0558a8650a48d81632a5b3c28d7ec062f7aee703916f3dd8428479325f0d177a8ceac3b6111cb749f49f8d3dd2c198ab26ea0de077ae3031527d087d1ffccd97e739571ad55748caca540b655559b041391421fb72cb5fe89391b0087c4902a3a26941666d53e7ed4d7a6b8629effb82a9dca27e4b79c7c868009df78c55b52d6d3b86c37c76277399ced2eb9bbcb864771404d6be"], &(0x7f0000000240)='GPL\x00'}, 0xa0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x23) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x9, 0x101, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0x1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x15, 0x14, &(0x7f00000023c0)=@raw=[@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe19}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000002480)='GPL\x00', 0x2e2, 0x0, 0x0, 0x41100, 0xc, '\x00', r5, 0x34, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000024c0)={0x1, 0xb, 0x9, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000026c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000002700)=[{0x4, 0x4, 0xb, 0xa}, {0x2, 0x0, 0x0, 0x3}], 0x10, 0x5}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x9, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeceb, 0x0, 0x0, 0x0, 0x4}, [@generic={0x0, 0x0, 0xd, 0x8, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x3, &(0x7f0000000bc0)=""/3, 0x41100, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001f80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001fc0)=[r4], &(0x7f0000002000)=[{0x0, 0x1, 0xa, 0x2}, {0x1, 0x2, 0x1, 0xb}, {0x3, 0x4, 0xb, 0x6}, {0x4, 0x5, 0xc, 0x6}, {0x4, 0x0, 0x1, 0x1}], 0x10, 0x2}, 0x90) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x66, &(0x7f0000000180)=""/102, 0x40f00, 0x68, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0x8, 0x1000, 0xfffffffe}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r9, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x3f, 0x1, 0x10, 0xa}, {0x0, 0x4, 0x6, 0x7}, {0x5, 0x3, 0x6, 0xc}, {0x0, 0x2, 0x5, 0xc}], 0x10, 0x8000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x85ffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x86000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="8b8bb9072df1251799a0e83800000000000010bd697ee4d28407bb9b477c4e4f0558a8650a48d81632a5b3c28d7ec062f7aee703916f3dd8428479325f0d177a8ceac3b6111cb749f49f8d3dd2c198ab26ea0de077ae3031527d087d1ffccd97e739571ad55748caca540b655559b041391421fb72cb5fe89391b0087c4902a3a26941666d53e7ed4d7a6b8629effb82a9dca27e4b79c7c868009df78c55b52d6d3b86c37c76277399ced2eb9bbcb864771404d6be"], &(0x7f0000000240)='GPL\x00'}, 0xa0) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x23) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x9, 0x101, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0x1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x15, 0x14, &(0x7f00000023c0)=@raw=[@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe19}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000002480)='GPL\x00', 0x2e2, 0x0, 0x0, 0x41100, 0xc, '\x00', r5, 0x34, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000024c0)={0x1, 0xb, 0x9, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000026c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000002700)=[{0x4, 0x4, 0xb, 0xa}, {0x2, 0x0, 0x0, 0x3}], 0x10, 0x5}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x9, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeceb, 0x0, 0x0, 0x0, 0x4}, [@generic={0x0, 0x0, 0xd, 0x8, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x3, &(0x7f0000000bc0)=""/3, 0x41100, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001f80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001fc0)=[r4], &(0x7f0000002000)=[{0x0, 0x1, 0xa, 0x2}, {0x1, 0x2, 0x1, 0xb}, {0x3, 0x4, 0xb, 0x6}, {0x4, 0x5, 0xc, 0x6}, {0x4, 0x0, 0x1, 0x1}], 0x10, 0x2}, 0x90) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x66, &(0x7f0000000180)=""/102, 0x40f00, 0x68, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0x8, 0x1000, 0xfffffffe}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r9, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x3f, 0x1, 0x10, 0xa}, {0x0, 0x4, 0x6, 0x7}, {0x5, 0x3, 0x6, 0xc}, {0x0, 0x2, 0x5, 0xc}], 0x10, 0x8000}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:45 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x68}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x88000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@ifindex=r0, 0x14, 0x1, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x9, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x0, 0x2}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001640), 0x0, 0xdb, &(0x7f0000001680)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000001700), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1a, 0x18, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f00000014c0)='syzkaller\x00', 0x401, 0xc, &(0x7f0000001500)=""/12, 0x100, 0x58, '\x00', r3, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0xb, 0x1ff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)=[r5]}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x91) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0x58, &(0x7f0000000f80)}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r8, 0x0, 0xda00) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xb, 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="184100000100000000000000000000005149956ac6fa4fd3df314c56474223bfa258f8f3eebe0a1cf41e30d7535d7638ff932fcd954a6709ee1d68479432cc8c85bfc360f296ddce5cc7dd30b476b59072ecf6a69e8db7b16832c4438580afd216760d57fa7823eb39c0c7955293160d7044233792aa6f036e95bf45cb6398756b3f88d10d698137fb7afb9fdf6b85315e8e23759167761386248630810da49572fec1bdae18ab86d376e4e659ba564a64781c32b154ff273d2daea2047a0185efcda23faa6b4b04940a27ffd4aa256c0b8968abcad1c714a7e44fccb6537e"], &(0x7f0000000a40)='syzkaller\x00', 0x4, 0x1c, &(0x7f0000000a80)=""/28, 0x40f00, 0x5, '\x00', r3, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x8, 0x6, 0x2}, 0x10, 0x0, r6, 0x3, &(0x7f0000000cc0)=[r7, r8, r9], &(0x7f0000000d00)=[{0x2, 0x5, 0x6, 0x9}, {0x4, 0x3, 0xf, 0x2}, {0x1, 0x4, 0x7, 0xd}], 0x10, 0x8000}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xbc77, 0x0, 0xffffffffffffffff, 0x3f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xde8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000006c0)='%pB \x00'}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r14}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @generic={0x9, 0xf, 0x0, 0x0, 0xaf}, @call={0x85, 0x0, 0x0, 0x30}, @exit, @call={0x85, 0x0, 0x0, 0x93}, @jmp={0x5, 0x1, 0x7, 0x3, 0x1, 0x4}], &(0x7f0000000180)='GPL\x00', 0x401, 0xe8, &(0x7f0000000240)=""/232, 0x40e00, 0x20, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xe, 0x2, 0x86f5}, 0x10, r1, 0x0, 0x0, &(0x7f0000000800)=[r11, 0x1, r12, r13, r14, r15], 0x0, 0x10, 0x4}, 0x90) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)=r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002a48e06092f1331f26c230aef7913b4f7bce1c816f9e9f54ca6431d7fb40dd7db0cb2006f2a3403e71f24f7e0c20dbea8d5e58f5b9986bb061bcada69752165d5cad0c77b230f3ca5d222b", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x10) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x90030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x90ffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3489.182490][T21411] FAULT_INJECTION: forcing a failure. [ 3489.182490][T21411] name failslab, interval 1, probability 0, space 0, times 0 13:14:45 executing program 4: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x18000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3489.259971][T21411] CPU: 1 PID: 21411 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3489.270147][T21411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3489.280058][T21411] Call Trace: [ 3489.283167][T21411] [ 3489.285941][T21411] dump_stack_lvl+0x151/0x1b7 [ 3489.290633][T21411] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3489.296096][T21411] dump_stack+0x15/0x17 [ 3489.300086][T21411] should_fail+0x3c6/0x510 [ 3489.304433][T21411] __should_failslab+0xa4/0xe0 [ 3489.309034][T21411] ? vm_area_dup+0x26/0x230 [ 3489.313454][T21411] should_failslab+0x9/0x20 [ 3489.317797][T21411] slab_pre_alloc_hook+0x37/0xd0 [ 3489.322752][T21411] ? vm_area_dup+0x26/0x230 [ 3489.327086][T21411] kmem_cache_alloc+0x44/0x200 [ 3489.331683][T21411] vm_area_dup+0x26/0x230 [ 3489.335853][T21411] copy_mm+0x9a1/0x13e0 [ 3489.339844][T21411] ? copy_signal+0x610/0x610 [ 3489.344264][T21411] ? __init_rwsem+0xd6/0x1c0 [ 3489.348693][T21411] ? copy_signal+0x4e3/0x610 [ 3489.353210][T21411] copy_process+0x1149/0x3290 [ 3489.357720][T21411] ? proc_fail_nth_write+0x20b/0x290 [ 3489.362839][T21411] ? fsnotify_perm+0x6a/0x5d0 [ 3489.367351][T21411] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3489.372336][T21411] ? vfs_write+0x9ec/0x1110 [ 3489.376643][T21411] kernel_clone+0x21e/0x9e0 [ 3489.381323][T21411] ? file_end_write+0x1c0/0x1c0 [ 3489.386007][T21411] ? create_io_thread+0x1e0/0x1e0 [ 3489.390870][T21411] ? mutex_unlock+0xb2/0x260 [ 3489.395293][T21411] ? __mutex_lock_slowpath+0x10/0x10 [ 3489.400439][T21411] __x64_sys_clone+0x23f/0x290 [ 3489.405013][T21411] ? __do_sys_vfork+0x130/0x130 [ 3489.409716][T21411] ? ksys_write+0x260/0x2c0 [ 3489.414039][T21411] ? debug_smp_processor_id+0x17/0x20 [ 3489.419247][T21411] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3489.425147][T21411] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3489.430618][T21411] do_syscall_64+0x3d/0xb0 [ 3489.434870][T21411] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3489.441081][T21411] RIP: 0033:0x7ff3418cfda9 [ 3489.445287][T21411] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3489.465509][T21411] RSP: 002b:00007ff340630078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3489.473860][T21411] RAX: ffffffffffffffda RBX: 00007ff3419fe050 RCX: 00007ff3418cfda9 [ 3489.481676][T21411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3489.489477][T21411] RBP: 00007ff340630120 R08: 0000000000000000 R09: 0000000000000000 [ 3489.497292][T21411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 13:14:45 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x72}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@ifindex=r0, 0x14, 0x1, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x9, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x0, 0x2}]}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001640), 0x0, 0xdb, &(0x7f0000001680)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000001700), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1a, 0x18, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f00000014c0)='syzkaller\x00', 0x401, 0xc, &(0x7f0000001500)=""/12, 0x100, 0x58, '\x00', r3, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0xb, 0x1ff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)=[r5]}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x91) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0x58, &(0x7f0000000f80)}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r8, 0x0, 0xda00) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xb, 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="184100000100000000000000000000005149956ac6fa4fd3df314c56474223bfa258f8f3eebe0a1cf41e30d7535d7638ff932fcd954a6709ee1d68479432cc8c85bfc360f296ddce5cc7dd30b476b59072ecf6a69e8db7b16832c4438580afd216760d57fa7823eb39c0c7955293160d7044233792aa6f036e95bf45cb6398756b3f88d10d698137fb7afb9fdf6b85315e8e23759167761386248630810da49572fec1bdae18ab86d376e4e659ba564a64781c32b154ff273d2daea2047a0185efcda23faa6b4b04940a27ffd4aa256c0b8968abcad1c714a7e44fccb6537e"], &(0x7f0000000a40)='syzkaller\x00', 0x4, 0x1c, &(0x7f0000000a80)=""/28, 0x40f00, 0x5, '\x00', r3, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x8, 0x6, 0x2}, 0x10, 0x0, r6, 0x3, &(0x7f0000000cc0)=[r7, r8, r9], &(0x7f0000000d00)=[{0x2, 0x5, 0x6, 0x9}, {0x4, 0x3, 0xf, 0x2}, {0x1, 0x4, 0x7, 0xd}], 0x10, 0x8000}, 0x90) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xbc77, 0x0, 0xffffffffffffffff, 0x3f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xde8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000006c0)='%pB \x00'}, 0x20) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r14}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @generic={0x9, 0xf, 0x0, 0x0, 0xaf}, @call={0x85, 0x0, 0x0, 0x30}, @exit, @call={0x85, 0x0, 0x0, 0x93}, @jmp={0x5, 0x1, 0x7, 0x3, 0x1, 0x4}], &(0x7f0000000180)='GPL\x00', 0x401, 0xe8, &(0x7f0000000240)=""/232, 0x40e00, 0x20, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xe, 0x2, 0x86f5}, 0x10, r1, 0x0, 0x0, &(0x7f0000000800)=[r11, 0x1, r12, r13, r14, r15], 0x0, 0x10, 0x4}, 0x90) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)=r0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002a48e06092f1331f26c230aef7913b4f7bce1c816f9e9f54ca6431d7fb40dd7db0cb2006f2a3403e71f24f7e0c20dbea8d5e58f5b9986bb061bcada69752165d5cad0c77b230f3ca5d222b", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x10) [ 3489.505231][T21411] R13: 000000000000006e R14: 00007ff3419fe050 R15: 00007ffcfe2d6d58 [ 3489.513047][T21411] 13:14:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x9d000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:45 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa0000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa002c000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3489.611178][T21430] FAULT_INJECTION: forcing a failure. [ 3489.611178][T21430] name failslab, interval 1, probability 0, space 0, times 0 [ 3489.665127][T21430] CPU: 0 PID: 21430 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3489.675524][T21430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3489.685418][T21430] Call Trace: [ 3489.688541][T21430] [ 3489.691324][T21430] dump_stack_lvl+0x151/0x1b7 [ 3489.695832][T21430] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3489.701300][T21430] dump_stack+0x15/0x17 [ 3489.705304][T21430] should_fail+0x3c6/0x510 [ 3489.709631][T21430] __should_failslab+0xa4/0xe0 [ 3489.714314][T21430] ? anon_vma_clone+0x9a/0x500 [ 3489.719369][T21430] should_failslab+0x9/0x20 [ 3489.723935][T21430] slab_pre_alloc_hook+0x37/0xd0 [ 3489.728648][T21430] ? anon_vma_clone+0x9a/0x500 [ 3489.733236][T21430] kmem_cache_alloc+0x44/0x200 [ 3489.737835][T21430] anon_vma_clone+0x9a/0x500 [ 3489.742283][T21430] anon_vma_fork+0x91/0x4e0 [ 3489.746604][T21430] ? anon_vma_name+0x4c/0x70 [ 3489.751614][T21430] ? vm_area_dup+0x17a/0x230 [ 3489.756043][T21430] copy_mm+0xa3a/0x13e0 [ 3489.760038][T21430] ? copy_signal+0x610/0x610 [ 3489.764449][T21430] ? __init_rwsem+0xd6/0x1c0 [ 3489.768876][T21430] ? copy_signal+0x4e3/0x610 [ 3489.773391][T21430] copy_process+0x1149/0x3290 [ 3489.777905][T21430] ? proc_fail_nth_write+0x20b/0x290 [ 3489.783043][T21430] ? fsnotify_perm+0x6a/0x5d0 [ 3489.787558][T21430] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3489.792499][T21430] ? vfs_write+0x9ec/0x1110 [ 3489.796828][T21430] kernel_clone+0x21e/0x9e0 [ 3489.801162][T21430] ? file_end_write+0x1c0/0x1c0 [ 3489.805848][T21430] ? create_io_thread+0x1e0/0x1e0 [ 3489.810709][T21430] ? mutex_unlock+0xb2/0x260 [ 3489.815135][T21430] ? __mutex_lock_slowpath+0x10/0x10 [ 3489.820268][T21430] __x64_sys_clone+0x23f/0x290 [ 3489.824876][T21430] ? __do_sys_vfork+0x130/0x130 [ 3489.829555][T21430] ? ksys_write+0x260/0x2c0 [ 3489.833892][T21430] ? debug_smp_processor_id+0x17/0x20 [ 3489.839092][T21430] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3489.845013][T21430] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3489.850461][T21430] do_syscall_64+0x3d/0xb0 [ 3489.855060][T21430] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3489.860969][T21430] RIP: 0033:0x7ff3418cfda9 [ 3489.865219][T21430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3489.884752][T21430] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3489.893001][T21430] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3489.903010][T21430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:46 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x78}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3489.911578][T21430] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3489.919476][T21430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3489.927941][T21430] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3489.935920][T21430] 13:14:46 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@ifindex=r0, 0x14, 0x1, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x9, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x0, 0x2}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001640), 0x0, 0xdb, &(0x7f0000001680)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000001700), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1a, 0x18, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f00000014c0)='syzkaller\x00', 0x401, 0xc, &(0x7f0000001500)=""/12, 0x100, 0x58, '\x00', r3, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0xb, 0x1ff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)=[r5]}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x91) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0x58, &(0x7f0000000f80)}, 0x10) (async) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r8, 0x0, 0xda00) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xb, 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="184100000100000000000000000000005149956ac6fa4fd3df314c56474223bfa258f8f3eebe0a1cf41e30d7535d7638ff932fcd954a6709ee1d68479432cc8c85bfc360f296ddce5cc7dd30b476b59072ecf6a69e8db7b16832c4438580afd216760d57fa7823eb39c0c7955293160d7044233792aa6f036e95bf45cb6398756b3f88d10d698137fb7afb9fdf6b85315e8e23759167761386248630810da49572fec1bdae18ab86d376e4e659ba564a64781c32b154ff273d2daea2047a0185efcda23faa6b4b04940a27ffd4aa256c0b8968abcad1c714a7e44fccb6537e"], &(0x7f0000000a40)='syzkaller\x00', 0x4, 0x1c, &(0x7f0000000a80)=""/28, 0x40f00, 0x5, '\x00', r3, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x8, 0x6, 0x2}, 0x10, 0x0, r6, 0x3, &(0x7f0000000cc0)=[r7, r8, r9], &(0x7f0000000d00)=[{0x2, 0x5, 0x6, 0x9}, {0x4, 0x3, 0xf, 0x2}, {0x1, 0x4, 0x7, 0xd}], 0x10, 0x8000}, 0x90) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xbc77, 0x0, 0xffffffffffffffff, 0x3f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xde8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000006c0)='%pB \x00'}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r14}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @generic={0x9, 0xf, 0x0, 0x0, 0xaf}, @call={0x85, 0x0, 0x0, 0x30}, @exit, @call={0x85, 0x0, 0x0, 0x93}, @jmp={0x5, 0x1, 0x7, 0x3, 0x1, 0x4}], &(0x7f0000000180)='GPL\x00', 0x401, 0xe8, &(0x7f0000000240)=""/232, 0x40e00, 0x20, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xe, 0x2, 0x86f5}, 0x10, r1, 0x0, 0x0, &(0x7f0000000800)=[r11, 0x1, r12, r13, r14, r15], 0x0, 0x10, 0x4}, 0x90) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)=r0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002a48e06092f1331f26c230aef7913b4f7bce1c816f9e9f54ca6431d7fb40dd7db0cb2006f2a3403e71f24f7e0c20dbea8d5e58f5b9986bb061bcada69752165d5cad0c77b230f3ca5d222b", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x10) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa1000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x88}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800008000000000000000000000000085000000890000009500006c00000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x165243) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fdffffff000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085eeffff851c00004da0100000000000850000000000400000000005832f72850000000000000000"], 0x0, 0x40, 0x30, &(0x7f0000000500)=""/48, 0x40f00, 0x8, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000bc0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x7, 0xc}, {0x1, 0x3, 0xe}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0xc0000}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000300000000002a746805000000000003000000000500000700000000010000000a0000000000000700000000005f00"], &(0x7f0000000340)=""/183, 0x3f, 0xb7, 0x0, 0x80000001}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x91) write$cgroup_type(r1, &(0x7f0000000840), 0x9) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @printk={@lli}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0x9, 0xe, 0xf, 0x400, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xb, 0x4, 0x3, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0xff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r4, r5, r6, r7, r8], &(0x7f0000000700)=[{0x3, 0x4, 0x0, 0xb}]}, 0x90) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xa4020000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000000180)=""/33, 0x29, 0x21, 0x1, 0x81}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xfffffff9, 0x6, 0x36, 0x200, r0, 0x492b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xc}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xc5, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r7, &(0x7f00000000c0), &(0x7f0000000200)=""/71}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x23, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x1, 0x0, 0x2, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x2, 0xf, 0xd, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x7ff, 0xfd, &(0x7f0000000600)=""/253, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r0, r0, r0, r0, r3, r4, r0, r5, r6, r0], &(0x7f0000000840)=[{0x1, 0x4, 0x2, 0xe}, {0x1, 0x2, 0xb}, {0x5, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x6, 0x3}, {0x5, 0x5, 0x10, 0x2}, {0x5, 0x2, 0x5, 0x6}], 0x10, 0xa9b0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xb0ffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xa0}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xb8000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000000180)=""/33, 0x29, 0x21, 0x1, 0x81}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xfffffff9, 0x6, 0x36, 0x200, r0, 0x492b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xc}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xc5, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r7, &(0x7f00000000c0), &(0x7f0000000200)=""/71}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x23, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x1, 0x0, 0x2, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x2, 0xf, 0xd, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x7ff, 0xfd, &(0x7f0000000600)=""/253, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r0, r0, r0, r0, r3, r4, r0, r5, r6, r0], &(0x7f0000000840)=[{0x1, 0x4, 0x2, 0xe}, {0x1, 0x2, 0xb}, {0x5, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x6, 0x3}, {0x5, 0x5, 0x10, 0x2}, {0x5, 0x2, 0x5, 0x6}], 0x10, 0xa9b0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000000180)=""/33, 0x29, 0x21, 0x1, 0x81}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xfffffff9, 0x6, 0x36, 0x200, r0, 0x492b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xc}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xc5, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r7, &(0x7f00000000c0), &(0x7f0000000200)=""/71}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x23, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x1, 0x0, 0x2, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x2, 0xf, 0xd, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x7ff, 0xfd, &(0x7f0000000600)=""/253, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r0, r0, r0, r0, r3, r4, r0, r5, r6, r0], &(0x7f0000000840)=[{0x1, 0x4, 0x2, 0xe}, {0x1, 0x2, 0xb}, {0x5, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x6, 0x3}, {0x5, 0x5, 0x10, 0x2}, {0x5, 0x2, 0x5, 0x6}], 0x10, 0xa9b0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xbf030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000000180)=""/33, 0x29, 0x21, 0x1, 0x81}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xfffffff9, 0x6, 0x36, 0x200, r0, 0x492b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xc}, 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xc5, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r7, &(0x7f00000000c0), &(0x7f0000000200)=""/71}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x23, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x1, 0x0, 0x2, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x2, 0xf, 0xd, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x7ff, 0xfd, &(0x7f0000000600)=""/253, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r0, r0, r0, r0, r3, r4, r0, r5, r6, r0], &(0x7f0000000840)=[{0x1, 0x4, 0x2, 0xe}, {0x1, 0x2, 0xb}, {0x5, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x6, 0x3}, {0x5, 0x5, 0x10, 0x2}, {0x5, 0x2, 0x5, 0x6}], 0x10, 0xa9b0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xc0ffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xcd030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xa1}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xd0ffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xd1c41a00}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xda030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:46 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb8}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xe1000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xe8000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000380)="672fd12cfc1a5affbfbf2aa2354489092829d6db99fce16083cd4babb738fac9645dede2d6d42177fc583fda210165dc331fcd3df1a0d418be81be8aebd92c0bbbf4560b1abe06c9e0bb36ed4616e9964d827f658afe9ad8fa2a58958281b7c8d62afef75e9eb26f9a7085b015596c2aae77b0fab5d3021160ad62ca94f651f1898cba5a06810004aceda04661a9dcec52746a737fc123e443d3cfb172cbc59ec8fc17fcf906622a49df23615b95e6a7"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800008000000000000000000000000085000000890000009500006c00000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x165243) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fdffffff000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085eeffff851c00004da0100000000000850000000000400000000005832f72850000000000000000"], 0x0, 0x40, 0x30, &(0x7f0000000500)=""/48, 0x40f00, 0x8, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000bc0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x7, 0xc}, {0x1, 0x3, 0xe}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0xc0000}, 0x90) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000300000000002a746805000000000003000000000500000700000000010000000a0000000000000700000000005f00"], &(0x7f0000000340)=""/183, 0x3f, 0xb7, 0x0, 0x80000001}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x91) (async) write$cgroup_type(r1, &(0x7f0000000840), 0x9) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @printk={@lli}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0x9, 0xe, 0xf, 0x400, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xb, 0x4, 0x3, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0xff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r4, r5, r6, r7, r8], &(0x7f0000000700)=[{0x3, 0x4, 0x0, 0xb}]}, 0x90) 13:14:46 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xe1}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 13:14:46 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xee030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000380)="672fd12cfc1a5affbfbf2aa2354489092829d6db99fce16083cd4babb738fac9645dede2d6d42177fc583fda210165dc331fcd3df1a0d418be81be8aebd92c0bbbf4560b1abe06c9e0bb36ed4616e9964d827f658afe9ad8fa2a58958281b7c8d62afef75e9eb26f9a7085b015596c2aae77b0fab5d3021160ad62ca94f651f1898cba5a06810004aceda04661a9dcec52746a737fc123e443d3cfb172cbc59ec8fc17fcf906622a49df23615b95e6a7"}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xf0000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000380)="672fd12cfc1a5affbfbf2aa2354489092829d6db99fce16083cd4babb738fac9645dede2d6d42177fc583fda210165dc331fcd3df1a0d418be81be8aebd92c0bbbf4560b1abe06c9e0bb36ed4616e9964d827f658afe9ad8fa2a58958281b7c8d62afef75e9eb26f9a7085b015596c2aae77b0fab5d3021160ad62ca94f651f1898cba5a06810004aceda04661a9dcec52746a737fc123e443d3cfb172cbc59ec8fc17fcf906622a49df23615b95e6a7"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xf1000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3490.613242][T21524] FAULT_INJECTION: forcing a failure. [ 3490.613242][T21524] name failslab, interval 1, probability 0, space 0, times 0 13:14:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x17, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='syzkaller\x00', 0x4d, 0x29, &(0x7f00000001c0)=""/41, 0x40f00, 0x51, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xe, 0xffffffff, 0xfffffff9}, 0x10, r3, r1, 0x1, &(0x7f0000000b00)=[r0], &(0x7f0000000b40)=[{0x0, 0x5, 0xd, 0x1}], 0x10, 0x35b}, 0x90) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) [ 3490.676220][T21524] CPU: 1 PID: 21524 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3490.686390][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3490.696287][T21524] Call Trace: [ 3490.699418][T21524] [ 3490.702181][T21524] dump_stack_lvl+0x151/0x1b7 [ 3490.706700][T21524] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3490.712182][T21524] dump_stack+0x15/0x17 [ 3490.716170][T21524] should_fail+0x3c6/0x510 [ 3490.720424][T21524] __should_failslab+0xa4/0xe0 [ 3490.725206][T21524] ? anon_vma_clone+0x9a/0x500 [ 3490.729874][T21524] should_failslab+0x9/0x20 [ 3490.734319][T21524] slab_pre_alloc_hook+0x37/0xd0 [ 3490.739176][T21524] ? anon_vma_clone+0x9a/0x500 [ 3490.744375][T21524] kmem_cache_alloc+0x44/0x200 [ 3490.748976][T21524] anon_vma_clone+0x9a/0x500 [ 3490.753405][T21524] anon_vma_fork+0x91/0x4e0 [ 3490.757741][T21524] ? anon_vma_name+0x43/0x70 [ 3490.762166][T21524] ? vm_area_dup+0x17a/0x230 [ 3490.766594][T21524] copy_mm+0xa3a/0x13e0 [ 3490.770589][T21524] ? copy_signal+0x610/0x610 13:14:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800008000000000000000000000000085000000890000009500006c00000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x165243) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fdffffff000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085eeffff851c00004da0100000000000850000000000400000000005832f72850000000000000000"], 0x0, 0x40, 0x30, &(0x7f0000000500)=""/48, 0x40f00, 0x8, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000bc0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x7, 0xc}, {0x1, 0x3, 0xe}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0xc0000}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000300000000002a746805000000000003000000000500000700000000010000000a0000000000000700000000005f00"], &(0x7f0000000340)=""/183, 0x3f, 0xb7, 0x0, 0x80000001}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x91) write$cgroup_type(r1, &(0x7f0000000840), 0x9) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @printk={@lli}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0x9, 0xe, 0xf, 0x400, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xb, 0x4, 0x3, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0xff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r4, r5, r6, r7, r8], &(0x7f0000000700)=[{0x3, 0x4, 0x0, 0xb}]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800008000000000000000000000000085000000890000009500006c00000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000000), 0x165243) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fdffffff000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085eeffff851c00004da0100000000000850000000000400000000005832f72850000000000000000"], 0x0, 0x40, 0x30, &(0x7f0000000500)=""/48, 0x40f00, 0x8, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000bc0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x7, 0xc}, {0x1, 0x3, 0xe}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0xc0000}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000300000000002a746805000000000003000000000500000700000000010000000a0000000000000700000000005f00"], &(0x7f0000000340)=""/183, 0x3f, 0xb7, 0x0, 0x80000001}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x91) (async) write$cgroup_type(r1, &(0x7f0000000840), 0x9) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @printk={@lli}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0x9, 0xe, 0xf, 0x400, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xb, 0x4, 0x3, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0xff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r4, r5, r6, r7, r8], &(0x7f0000000700)=[{0x3, 0x4, 0x0, 0xb}]}, 0x90) (async) [ 3490.775024][T21524] ? __init_rwsem+0xd6/0x1c0 [ 3490.779438][T21524] ? copy_signal+0x4e3/0x610 [ 3490.783960][T21524] copy_process+0x1149/0x3290 [ 3490.788487][T21524] ? proc_fail_nth_write+0x20b/0x290 [ 3490.793600][T21524] ? fsnotify_perm+0x6a/0x5d0 [ 3490.798101][T21524] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3490.803051][T21524] ? vfs_write+0x9ec/0x1110 [ 3490.807395][T21524] kernel_clone+0x21e/0x9e0 [ 3490.811736][T21524] ? file_end_write+0x1c0/0x1c0 [ 3490.816424][T21524] ? create_io_thread+0x1e0/0x1e0 [ 3490.821274][T21524] ? mutex_unlock+0xb2/0x260 13:14:47 executing program 4: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xa1}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3490.825700][T21524] ? __mutex_lock_slowpath+0x10/0x10 [ 3490.830824][T21524] __x64_sys_clone+0x23f/0x290 [ 3490.835424][T21524] ? __do_sys_vfork+0x130/0x130 [ 3490.840208][T21524] ? ksys_write+0x260/0x2c0 [ 3490.844742][T21524] ? debug_smp_processor_id+0x17/0x20 [ 3490.849930][T21524] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3490.855839][T21524] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3490.861302][T21524] do_syscall_64+0x3d/0xb0 [ 3490.865561][T21524] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3490.871278][T21524] RIP: 0033:0x7ff3418cfda9 [ 3490.875532][T21524] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3490.896416][T21524] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3490.905531][T21524] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3490.913430][T21524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 13:14:47 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xe8}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xfa030000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3490.921724][T21524] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3490.929981][T21524] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3490.937888][T21524] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3490.945773][T21524] 13:14:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 13:14:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 32) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x17, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='syzkaller\x00', 0x4d, 0x29, &(0x7f00000001c0)=""/41, 0x40f00, 0x51, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xe, 0xffffffff, 0xfffffff9}, 0x10, r3, r1, 0x1, &(0x7f0000000b00)=[r0], &(0x7f0000000b40)=[{0x0, 0x5, 0xd, 0x1}], 0x10, 0x35b}, 0x90) (async, rerun: 32) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup_ro(r4, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xff000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 4: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xe1}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffff1f}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3491.029692][T21582] FAULT_INJECTION: forcing a failure. [ 3491.029692][T21582] name failslab, interval 1, probability 0, space 0, times 0 [ 3491.057063][T21582] CPU: 1 PID: 21582 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3491.067387][T21582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3491.077456][T21582] Call Trace: [ 3491.080565][T21582] [ 3491.083340][T21582] dump_stack_lvl+0x151/0x1b7 [ 3491.087856][T21582] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3491.093323][T21582] dump_stack+0x15/0x17 [ 3491.097486][T21582] should_fail+0x3c6/0x510 [ 3491.104492][T21582] __should_failslab+0xa4/0xe0 [ 3491.110757][T21582] ? anon_vma_fork+0xf7/0x4e0 [ 3491.116157][T21582] should_failslab+0x9/0x20 [ 3491.120793][T21582] slab_pre_alloc_hook+0x37/0xd0 [ 3491.128073][T21582] ? anon_vma_fork+0xf7/0x4e0 [ 3491.132588][T21582] kmem_cache_alloc+0x44/0x200 [ 3491.140593][T21582] anon_vma_fork+0xf7/0x4e0 [ 3491.144997][T21582] ? anon_vma_name+0x43/0x70 [ 3491.150767][T21582] ? vm_area_dup+0x17a/0x230 [ 3491.155525][T21582] copy_mm+0xa3a/0x13e0 [ 3491.164642][T21582] ? copy_signal+0x610/0x610 [ 3491.169169][T21582] ? __init_rwsem+0xd6/0x1c0 [ 3491.173586][T21582] ? copy_signal+0x4e3/0x610 [ 3491.178321][T21582] copy_process+0x1149/0x3290 [ 3491.183964][T21582] ? proc_fail_nth_write+0x20b/0x290 [ 3491.189149][T21582] ? fsnotify_perm+0x6a/0x5d0 [ 3491.193749][T21582] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3491.199311][T21582] ? vfs_write+0x9ec/0x1110 [ 3491.203636][T21582] kernel_clone+0x21e/0x9e0 [ 3491.208117][T21582] ? file_end_write+0x1c0/0x1c0 [ 3491.212814][T21582] ? create_io_thread+0x1e0/0x1e0 [ 3491.217732][T21582] ? mutex_unlock+0xb2/0x260 [ 3491.222165][T21582] ? __mutex_lock_slowpath+0x10/0x10 [ 3491.227280][T21582] __x64_sys_clone+0x23f/0x290 [ 3491.231882][T21582] ? __do_sys_vfork+0x130/0x130 [ 3491.236574][T21582] ? ksys_write+0x260/0x2c0 [ 3491.240905][T21582] ? debug_smp_processor_id+0x17/0x20 [ 3491.246196][T21582] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3491.252104][T21582] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3491.257576][T21582] do_syscall_64+0x3d/0xb0 [ 3491.261826][T21582] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3491.267656][T21582] RIP: 0033:0x7ff3418cfda9 [ 3491.271919][T21582] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3491.298753][T21582] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3491.318637][T21582] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:47 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xf0}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffff80}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3491.330131][T21582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3491.341537][T21582] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3491.352182][T21582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3491.360032][T21582] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3491.367815][T21582] 13:14:47 executing program 4: syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x94, 0x7f, 0xc9, 0x0, 0x8, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x114cb0, 0x4, 0x6, 0x5, 0xfffffffffffffffc, 0x3, 0x1, 0x0, 0x800, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffff85}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffff90}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 4: syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x94, 0x7f, 0xc9, 0x0, 0x8, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x114cb0, 0x4, 0x6, 0x5, 0xfffffffffffffffc, 0x3, 0x1, 0x0, 0x800, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x94, 0x7f, 0xc9, 0x0, 0x8, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x114cb0, 0x4, 0x6, 0x5, 0xfffffffffffffffc, 0x3, 0x1, 0x0, 0x800, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) 13:14:47 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xf1}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffffb0}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3491.482357][T21596] FAULT_INJECTION: forcing a failure. [ 3491.482357][T21596] name failslab, interval 1, probability 0, space 0, times 0 13:14:47 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffffc0}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3491.555185][T21596] CPU: 0 PID: 21596 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3491.565531][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3491.575425][T21596] Call Trace: [ 3491.579514][T21596] [ 3491.582799][T21596] dump_stack_lvl+0x151/0x1b7 [ 3491.587398][T21596] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3491.592970][T21596] dump_stack+0x15/0x17 [ 3491.596943][T21596] should_fail+0x3c6/0x510 [ 3491.601191][T21596] __should_failslab+0xa4/0xe0 [ 3491.605823][T21596] ? anon_vma_fork+0x1df/0x4e0 [ 3491.610411][T21596] should_failslab+0x9/0x20 [ 3491.614746][T21596] slab_pre_alloc_hook+0x37/0xd0 [ 3491.619509][T21596] ? anon_vma_fork+0x1df/0x4e0 [ 3491.624116][T21596] kmem_cache_alloc+0x44/0x200 [ 3491.628708][T21596] anon_vma_fork+0x1df/0x4e0 [ 3491.633146][T21596] copy_mm+0xa3a/0x13e0 [ 3491.637224][T21596] ? copy_signal+0x610/0x610 [ 3491.641638][T21596] ? __init_rwsem+0xd6/0x1c0 [ 3491.646071][T21596] ? copy_signal+0x4e3/0x610 [ 3491.650510][T21596] copy_process+0x1149/0x3290 [ 3491.655054][T21596] ? proc_fail_nth_write+0x20b/0x290 [ 3491.660237][T21596] ? fsnotify_perm+0x6a/0x5d0 [ 3491.664858][T21596] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3491.669798][T21596] ? vfs_write+0x9ec/0x1110 [ 3491.674157][T21596] kernel_clone+0x21e/0x9e0 [ 3491.678481][T21596] ? file_end_write+0x1c0/0x1c0 [ 3491.683165][T21596] ? create_io_thread+0x1e0/0x1e0 [ 3491.688017][T21596] ? mutex_unlock+0xb2/0x260 [ 3491.692443][T21596] ? __mutex_lock_slowpath+0x10/0x10 [ 3491.697688][T21596] __x64_sys_clone+0x23f/0x290 [ 3491.702299][T21596] ? __do_sys_vfork+0x130/0x130 [ 3491.706977][T21596] ? ksys_write+0x260/0x2c0 [ 3491.711406][T21596] ? debug_smp_processor_id+0x17/0x20 [ 3491.717499][T21596] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3491.723413][T21596] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3491.728881][T21596] do_syscall_64+0x3d/0xb0 [ 3491.733118][T21596] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3491.738843][T21596] RIP: 0033:0x7ff3418cfda9 [ 3491.743101][T21596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3491.762560][T21596] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3491.771078][T21596] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3491.778889][T21596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3491.786891][T21596] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3491.794805][T21596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 13:14:48 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffffd0}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3491.803471][T21596] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3491.812908][T21596] 13:14:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x17, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='syzkaller\x00', 0x4d, 0x29, &(0x7f00000001c0)=""/41, 0x40f00, 0x51, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xe, 0xffffffff, 0xfffffff9}, 0x10, r3, r1, 0x1, &(0x7f0000000b00)=[r0], &(0x7f0000000b40)=[{0x0, 0x5, 0xd, 0x1}], 0x10, 0x35b}, 0x90) (async, rerun: 64) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_ro(r4, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) 13:14:48 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xffffffff}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:48 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x118}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:48 executing program 4: syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x94, 0x7f, 0xc9, 0x0, 0x8, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x114cb0, 0x4, 0x6, 0x5, 0xfffffffffffffffc, 0x3, 0x1, 0x0, 0x800, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x94, 0x7f, 0xc9, 0x0, 0x8, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x114cb0, 0x4, 0x6, 0x5, 0xfffffffffffffffc, 0x3, 0x1, 0x0, 0x800, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) 13:14:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 13:14:48 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0x4) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") [ 3491.935970][T21627] FAULT_INJECTION: forcing a failure. [ 3491.935970][T21627] name failslab, interval 1, probability 0, space 0, times 0 [ 3491.979043][T21627] CPU: 1 PID: 21627 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3491.989232][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3491.999203][T21627] Call Trace: [ 3492.002419][T21627] [ 3492.005188][T21627] dump_stack_lvl+0x151/0x1b7 [ 3492.009745][T21627] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3492.015168][T21627] dump_stack+0x15/0x17 [ 3492.019154][T21627] should_fail+0x3c6/0x510 [ 3492.023414][T21627] __should_failslab+0xa4/0xe0 [ 3492.028014][T21627] ? anon_vma_fork+0xf7/0x4e0 [ 3492.032545][T21627] should_failslab+0x9/0x20 [ 3492.036957][T21627] slab_pre_alloc_hook+0x37/0xd0 [ 3492.042070][T21627] ? anon_vma_fork+0xf7/0x4e0 [ 3492.046572][T21627] kmem_cache_alloc+0x44/0x200 [ 3492.051176][T21627] anon_vma_fork+0xf7/0x4e0 [ 3492.055505][T21627] ? anon_vma_name+0x43/0x70 [ 3492.059946][T21627] ? vm_area_dup+0x17a/0x230 [ 3492.064394][T21627] copy_mm+0xa3a/0x13e0 [ 3492.068357][T21627] ? copy_signal+0x610/0x610 [ 3492.072776][T21627] ? __init_rwsem+0xd6/0x1c0 [ 3492.077210][T21627] ? copy_signal+0x4e3/0x610 [ 3492.081642][T21627] copy_process+0x1149/0x3290 [ 3492.086316][T21627] ? proc_fail_nth_write+0x20b/0x290 [ 3492.091500][T21627] ? fsnotify_perm+0x6a/0x5d0 [ 3492.098130][T21627] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3492.103085][T21627] ? vfs_write+0x9ec/0x1110 [ 3492.108162][T21627] kernel_clone+0x21e/0x9e0 [ 3492.120683][T21627] ? file_end_write+0x1c0/0x1c0 [ 3492.126918][T21627] ? create_io_thread+0x1e0/0x1e0 [ 3492.132023][T21627] ? mutex_unlock+0xb2/0x260 [ 3492.140933][T21627] ? __mutex_lock_slowpath+0x10/0x10 [ 3492.146590][T21627] __x64_sys_clone+0x23f/0x290 [ 3492.152254][T21627] ? __do_sys_vfork+0x130/0x130 [ 3492.157143][T21627] ? ksys_write+0x260/0x2c0 [ 3492.165588][T21627] ? debug_smp_processor_id+0x17/0x20 [ 3492.171769][T21627] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3492.177835][T21627] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3492.183308][T21627] do_syscall_64+0x3d/0xb0 [ 3492.187643][T21627] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3492.193364][T21627] RIP: 0033:0x7ff3418cfda9 [ 3492.197615][T21627] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3492.217330][T21627] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 13:14:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0x4) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0x4) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) 13:14:48 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x2, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:48 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x138}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0x4) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0x4) (async) syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") (async) [ 3492.225767][T21627] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3492.233808][T21627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3492.241594][T21627] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3492.249402][T21627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3492.257215][T21627] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3492.265052][T21627] 13:14:48 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x3, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:48 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3492.356997][T21627] ================================================================== [ 3492.364911][T21627] BUG: KASAN: double-free or invalid-free in kfree+0xc8/0x220 [ 3492.372190][T21627] [ 3492.374379][T21627] CPU: 0 PID: 21627 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3492.384521][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3492.394498][T21627] Call Trace: [ 3492.397640][T21627] [ 3492.400400][T21627] dump_stack_lvl+0x151/0x1b7 [ 3492.404925][T21627] ? io_uring_drop_tctx_refs+0x190/0x190 [ 3492.410487][T21627] ? __wake_up_klogd+0xd5/0x110 [ 3492.415150][T21627] ? panic+0x751/0x751 [ 3492.419058][T21627] ? kfree+0xc8/0x220 [ 3492.422904][T21627] print_address_description+0x87/0x3b0 [ 3492.428255][T21627] ? kfree+0xc8/0x220 [ 3492.432073][T21627] ? kfree+0xc8/0x220 [ 3492.435891][T21627] kasan_report_invalid_free+0x6b/0xa0 [ 3492.441186][T21627] ____kasan_slab_free+0x13e/0x160 [ 3492.446141][T21627] __kasan_slab_free+0x11/0x20 [ 3492.450733][T21627] slab_free_freelist_hook+0xbd/0x190 [ 3492.455948][T21627] ? anon_vma_name_free+0x15/0x20 [ 3492.460801][T21627] kfree+0xc8/0x220 [ 3492.464450][T21627] anon_vma_name_free+0x15/0x20 [ 3492.469233][T21627] vm_area_free_no_check+0xa6/0x130 [ 3492.474258][T21627] copy_mm+0xefb/0x13e0 [ 3492.478288][T21627] ? copy_signal+0x610/0x610 [ 3492.483196][T21627] ? __init_rwsem+0xd6/0x1c0 [ 3492.487890][T21627] ? copy_signal+0x4e3/0x610 [ 3492.492323][T21627] copy_process+0x1149/0x3290 [ 3492.496910][T21627] ? proc_fail_nth_write+0x20b/0x290 [ 3492.502028][T21627] ? fsnotify_perm+0x6a/0x5d0 [ 3492.506542][T21627] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3492.511489][T21627] ? vfs_write+0x9ec/0x1110 [ 3492.516090][T21627] kernel_clone+0x21e/0x9e0 [ 3492.520428][T21627] ? file_end_write+0x1c0/0x1c0 [ 3492.525438][T21627] ? create_io_thread+0x1e0/0x1e0 [ 3492.530394][T21627] ? mutex_unlock+0xb2/0x260 [ 3492.534808][T21627] ? __mutex_lock_slowpath+0x10/0x10 [ 3492.539940][T21627] __x64_sys_clone+0x23f/0x290 [ 3492.544539][T21627] ? __do_sys_vfork+0x130/0x130 [ 3492.549209][T21627] ? ksys_write+0x260/0x2c0 [ 3492.553554][T21627] ? debug_smp_processor_id+0x17/0x20 [ 3492.558761][T21627] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3492.566158][T21627] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3492.571789][T21627] do_syscall_64+0x3d/0xb0 [ 3492.576045][T21627] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3492.581759][T21627] RIP: 0033:0x7ff3418cfda9 [ 3492.586016][T21627] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3492.605536][T21627] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3492.613781][T21627] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 [ 3492.621694][T21627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3492.629502][T21627] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3492.637407][T21627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3492.645212][T21627] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3492.653037][T21627] [ 3492.655908][T21627] [ 3492.658049][T21627] Allocated by task 336: [ 3492.662475][T21627] __kasan_slab_alloc+0xb1/0xe0 [ 3492.667250][T21627] slab_post_alloc_hook+0x53/0x2c0 [ 3492.672193][T21627] kmem_cache_alloc+0xf5/0x200 [ 3492.676797][T21627] vm_area_dup+0x26/0x230 [ 3492.681145][T21627] copy_mm+0x9a1/0x13e0 [ 3492.685134][T21627] copy_process+0x1149/0x3290 [ 3492.689650][T21627] kernel_clone+0x21e/0x9e0 [ 3492.694249][T21627] __x64_sys_clone+0x23f/0x290 [ 3492.698852][T21627] do_syscall_64+0x3d/0xb0 [ 3492.703120][T21627] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3492.708830][T21627] [ 3492.711000][T21627] Last potentially related work creation: [ 3492.716556][T21627] kasan_save_stack+0x3b/0x60 [ 3492.721152][T21627] __kasan_record_aux_stack+0xd3/0xf0 [ 3492.726361][T21627] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3492.732115][T21627] call_rcu+0x133/0x12a0 [ 3492.736191][T21627] vm_area_free_no_check+0xff/0x130 [ 3492.741220][T21627] vm_area_free+0x53/0x60 [ 3492.745396][T21627] exit_mmap+0x50d/0x6f0 [ 3492.749466][T21627] __mmput+0x95/0x310 [ 3492.753283][T21627] mmput+0x5b/0x170 [ 3492.756929][T21627] do_exit+0xb9c/0x2ca0 [ 3492.760920][T21627] do_group_exit+0x141/0x310 [ 3492.765358][T21627] get_signal+0x7a3/0x1630 [ 3492.769601][T21627] arch_do_signal_or_restart+0xbd/0x1680 [ 3492.775190][T21627] exit_to_user_mode_loop+0xa0/0xe0 [ 3492.780215][T21627] exit_to_user_mode_prepare+0x5a/0xa0 [ 3492.785519][T21627] syscall_exit_to_user_mode+0x26/0x160 [ 3492.790891][T21627] ret_from_fork+0x15/0x30 [ 3492.795146][T21627] [ 3492.797313][T21627] Second to last potentially related work creation: [ 3492.804084][T21627] kasan_save_stack+0x3b/0x60 [ 3492.808607][T21627] __kasan_record_aux_stack+0xd3/0xf0 [ 3492.813805][T21627] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3492.819685][T21627] call_rcu+0x133/0x12a0 [ 3492.823688][T21627] vm_area_free_no_check+0xff/0x130 [ 3492.828733][T21627] vm_area_free+0x53/0x60 [ 3492.833069][T21627] exit_mmap+0x50d/0x6f0 [ 3492.837140][T21627] __mmput+0x95/0x310 [ 3492.840956][T21627] mmput+0x5b/0x170 [ 3492.844692][T21627] do_exit+0xb9c/0x2ca0 [ 3492.848683][T21627] do_group_exit+0x141/0x310 [ 3492.853109][T21627] get_signal+0x7a3/0x1630 [ 3492.857362][T21627] arch_do_signal_or_restart+0xbd/0x1680 [ 3492.862829][T21627] exit_to_user_mode_loop+0xa0/0xe0 [ 3492.867874][T21627] exit_to_user_mode_prepare+0x5a/0xa0 [ 3492.873157][T21627] syscall_exit_to_user_mode+0x26/0x160 [ 3492.878550][T21627] do_syscall_64+0x49/0xb0 [ 3492.882792][T21627] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3492.888529][T21627] [ 3492.890692][T21627] The buggy address belongs to the object at ffff8881199b3b90 [ 3492.890692][T21627] which belongs to the cache vm_area_struct of size 232 [ 3492.904848][T21627] The buggy address is located 88 bytes inside of [ 3492.904848][T21627] 232-byte region [ffff8881199b3b90, ffff8881199b3c78) [ 3492.918394][T21627] The buggy address belongs to the page: [ 3492.923944][T21627] page:ffffea0004666cc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1199b3 [ 3492.934005][T21627] flags: 0x4000000000000200(slab|zone=1) [ 3492.939475][T21627] raw: 4000000000000200 dead000000000100 dead000000000122 ffff8881001bd500 [ 3492.947898][T21627] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 3492.956477][T21627] page dumped because: kasan: bad access detected [ 3492.962740][T21627] page_owner tracks the page as allocated [ 3492.968418][T21627] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 30475, ts 1324331703277, free_ts 1324299382954 [ 3492.985103][T21627] post_alloc_hook+0x1a3/0x1b0 [ 3492.989765][T21627] prep_new_page+0x1b/0x110 [ 3492.994099][T21627] get_page_from_freelist+0x3550/0x35d0 [ 3492.999484][T21627] __alloc_pages+0x27e/0x8f0 [ 3493.003912][T21627] new_slab+0x9a/0x4e0 [ 3493.007826][T21627] ___slab_alloc+0x39e/0x830 [ 3493.012246][T21627] __slab_alloc+0x4a/0x90 [ 3493.016410][T21627] kmem_cache_alloc+0x134/0x200 [ 3493.021093][T21627] vm_area_alloc+0x24/0x130 [ 3493.025444][T21627] mmap_region+0xb5d/0x1b60 [ 3493.029867][T21627] do_mmap+0x776/0xe50 [ 3493.033760][T21627] vm_mmap_pgoff+0x1dd/0x450 [ 3493.038377][T21627] ksys_mmap_pgoff+0xed/0x1e0 [ 3493.042893][T21627] __x64_sys_mmap+0x103/0x120 [ 3493.047398][T21627] do_syscall_64+0x3d/0xb0 [ 3493.051653][T21627] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3493.057384][T21627] page last free stack trace: [ 3493.061901][T21627] free_unref_page_prepare+0x7c8/0x7d0 [ 3493.067188][T21627] free_unref_page_list+0x14b/0xa60 [ 3493.072220][T21627] release_pages+0x1310/0x1370 [ 3493.076836][T21627] free_pages_and_swap_cache+0x8a/0xa0 [ 3493.082250][T21627] tlb_finish_mmu+0x177/0x320 [ 3493.086717][T21627] exit_mmap+0x3ef/0x6f0 [ 3493.090795][T21627] __mmput+0x95/0x310 [ 3493.094616][T21627] mmput+0x5b/0x170 [ 3493.098259][T21627] do_exit+0xb9c/0x2ca0 [ 3493.102337][T21627] do_group_exit+0x141/0x310 [ 3493.106766][T21627] get_signal+0x7a3/0x1630 [ 3493.111017][T21627] arch_do_signal_or_restart+0xbd/0x1680 [ 3493.117278][T21627] exit_to_user_mode_loop+0xa0/0xe0 [ 3493.122313][T21627] exit_to_user_mode_prepare+0x5a/0xa0 [ 3493.127600][T21627] syscall_exit_to_user_mode+0x26/0x160 [ 3493.132977][T21627] do_syscall_64+0x49/0xb0 [ 3493.137229][T21627] [ 3493.139397][T21627] Memory state around the buggy address: [ 3493.144877][T21627] ffff8881199b3a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 13:14:49 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xbc, 0x2, 0xf9, 0x1, 0x0, 0xab, 0x2cc42, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x8}, 0x10000, 0x5, 0x6, 0x2fd067f8c2cfc07b, 0x3, 0x7fffffff, 0x100, 0x0, 0xfffffff7, 0x0, 0x4}, r2, 0x6, r1, 0x9) 13:14:49 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x160}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3493.152768][T21627] ffff8881199b3b00: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 3493.160666][T21627] >ffff8881199b3b80: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3493.168563][T21627] ^ [ 3493.175855][T21627] ffff8881199b3c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 3493.183751][T21627] ffff8881199b3c80: fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 [ 3493.191658][T21627] ================================================================== [ 3493.199554][T21627] Disabling lock debugging due to kernel taint 13:14:49 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xbc, 0x2, 0xf9, 0x1, 0x0, 0xab, 0x2cc42, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x8}, 0x10000, 0x5, 0x6, 0x2fd067f8c2cfc07b, 0x3, 0x7fffffff, 0x100, 0x0, 0xfffffff7, 0x0, 0x4}, r2, 0x6, r1, 0x9) 13:14:49 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x5, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:49 executing program 3: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2c02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x195}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13:14:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f0000198500009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 13:14:49 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_clone(0x90a9500, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000005c0)="4b92eaf878e8459901dd80b3832856e775fae196e7199a87d6") perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xbc, 0x2, 0xf9, 0x1, 0x0, 0xab, 0x2cc42, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x8}, 0x10000, 0x5, 0x6, 0x2fd067f8c2cfc07b, 0x3, 0x7fffffff, 0x100, 0x0, 0xfffffff7, 0x0, 0x4}, r2, 0x6, r1, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xbc, 0x2, 0xf9, 0x1, 0x0, 0xab, 0x2cc42, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x8}, 0x10000, 0x5, 0x6, 0x2fd067f8c2cfc07b, 0x3, 0x7fffffff, 0x100, 0x0, 0xfffffff7, 0x0, 0x4}, r2, 0x6, r1, 0x9) 13:14:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x90a9500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) [ 3493.325755][T21682] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 3493.337317][T21682] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 3493.346028][T21682] CPU: 1 PID: 21682 Comm: syz-executor.2 Tainted: G B 5.15.148-syzkaller-00718-g993bed180178 #0 [ 3493.357651][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3493.367639][T21682] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 3493.373449][T21682] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 3493.392896][T21682] RSP: 0018:ffffc90000c478f8 EFLAGS: 00010202 [ 3493.399186][T21682] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 3493.407081][T21682] RDX: ffffffff81a50880 RSI: ffff888109304390 RDI: ffff8881831b1ac0 [ 3493.414890][T21682] RBP: ffffc90000c47960 R08: dffffc0000000000 R09: ffff8881831b1ac8 [ 3493.422702][T21682] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 3493.430686][T21682] R13: ffff8881199b3be8 R14: 0000000000000001 R15: ffff888166c29870 [ 3493.438496][T21682] FS: 00007ff3406516c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 3493.447262][T21682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3493.453704][T21682] CR2: 0000555555ce88f8 CR3: 00000001e8e8f000 CR4: 00000000003506a0 [ 3493.461505][T21682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3493.469606][T21682] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3493.477408][T21682] Call Trace: [ 3493.480525][T21682] [ 3493.483390][T21682] ? __die_body+0x62/0xb0 [ 3493.487561][T21682] ? die_addr+0x9f/0xd0 [ 3493.491547][T21682] ? exc_general_protection+0x311/0x4b0 [ 3493.496934][T21682] ? asm_exc_general_protection+0x27/0x30 [ 3493.502575][T21682] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 3493.508816][T21682] ? __rb_insert_augmented+0x91/0x610 [ 3493.514030][T21682] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 3493.520449][T21682] vma_interval_tree_insert_after+0x2be/0x2d0 [ 3493.526545][T21682] copy_mm+0xba2/0x13e0 [ 3493.530534][T21682] ? copy_signal+0x610/0x610 [ 3493.535292][T21682] ? __init_rwsem+0xd6/0x1c0 [ 3493.539715][T21682] ? copy_signal+0x4e3/0x610 [ 3493.544497][T21682] copy_process+0x1149/0x3290 [ 3493.549009][T21682] ? proc_fail_nth_write+0x20b/0x290 [ 3493.554135][T21682] ? fsnotify_perm+0x6a/0x5d0 [ 3493.558641][T21682] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 3493.563598][T21682] ? vfs_write+0x9ec/0x1110 [ 3493.568461][T21682] kernel_clone+0x21e/0x9e0 [ 3493.572789][T21682] ? file_end_write+0x1c0/0x1c0 [ 3493.577470][T21682] ? create_io_thread+0x1e0/0x1e0 [ 3493.582339][T21682] ? mutex_unlock+0xb2/0x260 [ 3493.586762][T21682] ? __mutex_lock_slowpath+0x10/0x10 [ 3493.591882][T21682] __x64_sys_clone+0x23f/0x290 [ 3493.596478][T21682] ? __do_sys_vfork+0x130/0x130 [ 3493.601210][T21682] ? ksys_write+0x260/0x2c0 [ 3493.606041][T21682] ? debug_smp_processor_id+0x17/0x20 [ 3493.611243][T21682] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3493.617143][T21682] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3493.622611][T21682] do_syscall_64+0x3d/0xb0 [ 3493.626866][T21682] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3493.632590][T21682] RIP: 0033:0x7ff3418cfda9 [ 3493.636846][T21682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3493.656284][T21682] RSP: 002b:00007ff340651078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3493.664710][T21682] RAX: ffffffffffffffda RBX: 00007ff3419fdf80 RCX: 00007ff3418cfda9 13:14:50 executing program 0: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x6, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 3493.672530][T21682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000090a9400 [ 3493.680334][T21682] RBP: 00007ff340651120 R08: 0000000000000000 R09: 0000000000000000 [ 3493.688139][T21682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 3493.696061][T21682] R13: 000000000000000b R14: 00007ff3419fdf80 R15: 00007ffcfe2d6d58 [ 3493.703864][T21682] [ 3493.706728][T21682] Modules linked in: [ 3493.731620][T21682] ---[ end trace a597c8a8da3e7330 ]--- [ 3493.738858][T21682] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 3493.744684][T21682] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 3493.764533][T21682] RSP: 0018:ffffc90000c478f8 EFLAGS: 00010202 [ 3493.770968][T21682] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 3493.781313][T21682] RDX: ffffffff81a50880 RSI: ffff888109304390 RDI: ffff8881831b1ac0 [ 3493.790050][T21682] RBP: ffffc90000c47960 R08: dffffc0000000000 R09: ffff8881831b1ac8 [ 3493.798272][T21682] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 3493.806555][T21682] R13: ffff8881199b3be8 R14: 0000000000000001 R15: ffff888166c29870 [ 3493.815952][T21682] FS: 00007ff3406516c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 3493.826753][T21682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3493.834753][T21682] CR2: 0000001b33423000 CR3: 00000001e8e8f000 CR4: 00000000003506a0 [ 3493.844436][T21682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3493.854074][T21682] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3493.862783][T21682] Kernel panic - not syncing: Fatal exception [ 3493.868821][T21682] Kernel Offset: disabled [ 3493.873037][T21682] Rebooting in 86400 seconds..